Live webinarWebinar with Jason Lee, Tue, Oct 13Your newest insider is an AI agent.Jason LeeFormer CISO, Zoom & SplunkRegister

Guardrails for GitHub Copilot, built from your own rules.

Your company's rules reach GitHub Copilot before every edit, from the first prompt to the final review.

npx -y @cybedefend/vibedefend@latest install

Create a free accountVS Code Copilot 1.110 or laterRead the docs

GitHub CopilotGitHub Copilot is writingbilling/refund.ts

export async function refund(req: Request) {
  const { id, amount } = await req.json();
  const invoice = await db.invoices.find({
    id, tenant: req.tenant,
  });
  if (amount > 500)
    await approvals.second(invoice);
  return payments.refund(invoice, amount);
}

Every query is scoped to the tenant.

rules/data-access.md

Refunds above €500 need a second approver.

Approved once by Sofia M.

Checked before the commit: clean

Set up in four steps.

  1. Run one commandIn any terminal, on macOS, Linux or Windows. Node 18.17 or later.
  2. Choose your region, sign inEU or US. Your browser opens to sign in, no key to paste.
  3. Tick GitHub CopilotThe installer finds the agents on your machine and ticks them for you.
  4. Code as usualOpen VS Code 1.110 or later: VibeDefend runs alongside it.

Check it any time: vibedefend status

What VibeDefend adds to GitHub Copilot.

Rules served

Your business and security rules reach GitHub Copilot before each edit.

GitHub CopilotGitHub Copilot is writingsrc/billing/cart-checkout.ts

const total = new Decimal128(cart.sum);
const rows = await db.query(
  "SELECT * FROM carts WHERE id = $1", [id]
);

Monetary amounts use Decimal128, never Number.

Mined from src/billing.ts:14

Parameterise every query that mixes user input.

OWASP Top 10

Served before the edit

Live findings

SAST, SCA, secrets, IaC and CI/CD findings, live in the session.

GitHub CopilotGitHub Copilot

  1. SASTsrc/db/users.repo.ts:42

    SQL injection

  2. SCApackage.json

    lodash 4.17.20, CVE-2021-23337

  3. Secretsconfig/prod.yml

    AWS access key

  4. IaCinfra/main.tf

    S3 bucket public-read

  5. CI/CD.github/workflows/deploy.yml

    pull_request_target

In the agent's context, live

Limits in GitHub Copilot

  • Secret guardNot available
  • Action guardNot available

Your questions.

Does VibeDefend change my GitHub Copilot configuration?
It adds its hooks and registers the cybedefend MCP server, in ~/.copilot/hooks/cybedefend.json, Code/User/mcp.json. Your own hooks stay: re-running the installer only replaces VibeDefend's entries.
What leaves my machine?
The analysis runs in the region you chose at install, EU or US. The decision to block an action is made on your machine. Before an edit, the hook sends the part of the file being written, to find the rules that apply. The session review sends the files the session changed. Your sign-in token stays in your OS keychain.
Which version of GitHub Copilot do I need?
GitHub Copilot 1.110 or later, and Node 18.17 or later. The installer runs on macOS, Linux and Windows.
Do I need to link each repository?
Not for projects imported from GitHub or GitLab: VibeDefend reads the repo's origin and finds the project. For any other repo, run vibedefend link once. It writes .cybedefend/config.json with the project ID.
How do I remove it?
Run vibedefend uninstall: it removes every file VibeDefend installed. If you installed the package globally, then run npm uninstall -g @cybedefend/vibedefend.
Can VibeDefend block actions in GitHub Copilot?
Not yet. In VS Code, VibeDefend brings your rules before each edit, at session start, at the end of the session and before compaction. Blocking dangerous actions is not available in Copilot yet.
Technical details for VS Code Copilot
MCP server
AvailableCode/User/mcp.json
Rules before each edit
AvailablePreToolUseVS Code ignores hook matchers, so the VibeDefend runner keeps only the edit tools itself.
Dangerous actions blocked
Not availableNo equivalentNot available in VS Code Copilot yet.
Rules loaded at start
AvailableSessionStart
End-of-session review
AvailableStop
Review of long sessions
AvailablePreCompact
Reminder on every prompt
Not availableNo equivalentNot available in VS Code Copilot.

What it writes for VS Code Copilot

  • ~/.copilot/hooks/cybedefend.json
  • Code/User/mcp.json

And the hook runner in ~/.cybedefend/. Your own hooks stay: re-running the installer only replaces VibeDefend's entries.

VS Code 1.110 or later. The installer finds VS Code through the code command: if it is missing, run Shell Command: Install 'code' command in PATH from the Command Palette.

Blocking dangerous actions is not available in Copilot yet. Rules before each edit, at session start, at the end of the session and on long sessions are.

Something off? vibedefend status gives a read-only report, and vibedefend doctor repairs what it can.

VibeDefend also works with