Connect GitHub Copilot once. Control repository access in Secure Git Bridge.

1. Install Secure Git Bridge once

Add the Git repositories you want Secure Git Bridge to protect. Each repository keeps its own isolated helper, rotating broker capability, protected-file policy, audit chain, and patch proposal store.

2. Connect GitHub Copilot once

Open GitHub Copilot in Secure Git Bridge and choose Connect GitHub Copilot. Secure Git Bridge opens VS Code's MCP installation prompt for the provider-wide Secure Git Bridge connector. Approve it once. You do not copy repository pairing values or create a new MCP entry for every repository.

The provider connector contains no repository path, repository ID, or repository broker credential. Provider setup and repository authority are separate.

3. Bind GitHub Copilot to a repository in Secure Git Bridge

Select the approved repository in Secure Git Bridge and choose Bind to this repository. Secure Git Bridge creates the internal route only after that human action. GitHub Copilot cannot enumerate, choose, or switch repositories through its connector.

If you later choose Move, Secure Git Bridge closes the previous provider session and moves the same installed connector to the newly selected repository. No reinstall is required.

4. Work through the Secure Git Bridge tools

• Read only policy-permitted repository content.
• Protected files and path escapes remain blocked.
• Git status, log, and diff remain repository-scoped.
• The AI may create patch proposals for local review.
• There is no Secure Git Bridge shell, repository picker, approval, rejection, or Apply tool for the AI.

Apply remains human-only inside Secure Git Bridge.

Normal VS Code workspace file, edit, terminal, browser, or agent tools are outside Secure Git Bridge's boundary. For an SSGB-secured workflow, perform repository operations through the Secure Git Bridge MCP tools.

Disconnect without reinstalling

Unbind removes GitHub Copilot's repository route while leaving the provider connector configured. Disconnect This Repository revokes every AI route to that repository. Disconnect All AI Access revokes all repository routes. Provider connectors can remain installed and be rebound later.

What “Connected,” “Bound,” and “Active” mean

Connector ready means the one-time provider setup has been handed off and no repository authority is implied. Bound means Secure Git Bridge has authorized one repository route. Active is shown only after Secure Git Bridge sees a live provider MCP session.

Provider account and data flow

Your GitHub Copilot account, plan, usage, retention, and provider-side privacy terms remain with the provider. Repository content you intentionally authorize the AI to inspect can be transmitted to that provider through the normal AI interaction. Secure Git Bridge controls the local repository boundary and records access; it does not claim provider-side data handling.

Next steps

Download Secure Git Bridge Open the quick start

For the trust boundary and release model, see Security and How It Works.