Question

A security lead configures content exclusions in the organization settings to block Copilot from using a directory named 'secrets/' that contains credential files. A developer later asks the security lead whether excluding these files also guarantees that the file names, directory structure, and paths within 'secrets/' are hidden from GitHub's servers and never referenced anywhere. What is the accurate response?

Accepted Answer

Content exclusions prevent Copilot from using the file contents as context or generating suggestions in those files, but they are not a comprehensive data-hiding mechanism and do not guarantee that file paths or repository metadata are never processed.

Answer

Content exclusions fully encrypt and hide the file names, paths, and directory structure from GitHub's servers in addition to blocking the contents.

Answer

Content exclusions only take effect after the excluded files are deleted from the repository, so metadata is removed automatically.

Answer

Content exclusions apply exclusively to the file contents in chat and have no effect on completions, so paths remain fully protected.