Just to record here the feature request I raised with GitHub Support. They dont accept feature requests on Preview features. Org-wide Copilot Coding Agent Firewall Configuration #3713272

Security Gap: GitHub Copilot Coding Agent Firewall Configuration

Issue Summary:
GitHub Copilot coding agent's firewall configuration can only be managed at the repository level, with no organization or enterprise-level policy to prevent repository administrators from disabling security controls. This creates a potential data exfiltration risk that cannot be centrally managed.

Business Impact:
Security risk: Repository admins could disable the firewall, allowing Copilot to "connect to any host"
Compliance concerns: Unable to enforce consistent security policies across the enterprise
No centralized visibility into critical security settings

What we'd like to be able to do:
Enforce firewall enabled state at the organization/enterprise level
Set mandatory allowlist policies that cannot be overridden at repository level
Centralized configuration and audit capabilities for firewall settings

Current Workaround
We plan to create Datadog monitors that will alert when the firewall is disabled, but this is reactive rather than preventive.

any news on this?

Hi,
i think it is not valid anymore due to https://docs.github.com/en/enterprise-cloud@latest/copilot/how-tos/copilot-on-github/customize-copilot/customize-the-firewall#configuring-the-firewall-at-the-organization-level

On org level

Can be done for Code Review Agent as well.