Record · corpus.blog/posts/01a0876c-1fc5-735c-b29b-9629354489c2

Where the GitHub Copilot extension points break governance

devopsjournal.io · published 1 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at devopsjournal.io Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 34
Words captured: 7,179

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://unsplash.com/@reganography?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText

unsplash.com

https://unsplash.com/photos/a-sign-on-the-side-of-a-building-that-says-growing-concerns-STDn0DxY8os?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText

unsplash.com

https://docs.github.com/en/copilot/how-tos/copilot-cli/customize-copilot/plugins-marketplace

docs.github.com

https://docs.github.com/en/copilot/reference/cli-plugin-reference

docs.github.com

https://htek.dev/articles/github-copilot-cli-extensions-complete-guide/

htek.dev

https://github.com/github/copilot-cli/issues/2076

github.com

https://agent-plugins.org/specification

agent-plugins.org

https://code.visualstudio.com/docs/agent-customization/agent-plugins

code.visualstudio.com

https://github.com/microsoft/apm

github.com

https://microsoft.github.io/apm/enterprise/policy-reference/

microsoft.github.io

https://microsoft.github.io/apm/enterprise/governance-guide/

microsoft.github.io

https://microsoft.github.io/apm/specs/openapm-v01/

microsoft.github.io

https://microsoft.github.io/apm/guides/mcp-servers/

microsoft.github.io

https://github.blog/changelog/2026-04-16-manage-agent-skills-with-github-cli/

github.blog

https://agentskills.io

agentskills.io

https://docs.github.com/repositories/releasing-projects-on-github/about-releases

docs.github.com

https://cli.github.com/manual/gh_skill

cli.github.com

https://docs.github.com/en/code-security/dependabot/ecosystems-supported-by-dependabot/supported-ecosystems-and-repositories

docs.github.com

https://www.endorlabs.com/learn/state-of-dependency-management-2025

endorlabs.com

https://www.prnewswire.com/news-releases/endor-labs-launches-2025-state-of-dependency-management-report-finds-80-of-ai-suggested-dependencies-contain-risks-302603438.html

prnewswire.com

https://code.visualstudio.com/docs/copilot/customization/mcp-servers

code.visualstudio.com

https://microsoft.github.io/apm/reference/cli-commands/

microsoft.github.io

https://docs.github.com/en/copilot/how-tos/administer-copilot/manage-mcp-usage/configure-mcp-registry

docs.github.com

https://code.visualstudio.com/docs/configure/extensions/extension-runtime-security

code.visualstudio.com

https://open-vsx.org/

open-vsx.org

https://newsroom.eclipse.org/news/announcements/eclipse-foundation-launches-open-vsx-managed-registry-0

newsroom.eclipse.org

https://developer.microsoft.com/blog/security-and-trust-in-visual-studio-marketplace

developer.microsoft.com

https://www.wiz.io/blog/supply-chain-risk-in-vscode-extension-marketplaces

wiz.io

https://blog.checkpoint.com/securing-the-cloud/malicious-vscode-extensions-with-more-than-45k-downloads-steal-pii-and-enable-backdoors/

blog.checkpoint.com

https://extensiontotal.com

extensiontotal.com

https://code.visualstudio.com/docs/enterprise/policies

code.visualstudio.com

https://docs.github.com/en/copilot/reference/enterprise-managed-settings-reference

docs.github.com

https://docs.github.com/en/copilot/how-tos/cloud-and-local-sandboxes/configuring-local-sandbox-settings

docs.github.com

https://learn.microsoft.com/en-us/visualstudio/ide/deploy-copilot-to-enterprise

learn.microsoft.com