CertifyDeckCargando contenido…
The official GitHub Copilot syllabus, organized by domain. Check off each point as you review it.
Inicia sesión para guardar tu progreso entre sesiones.
Understand responsible AI principles
Copilot can hallucinate: produce plausible but false code or text. Its quality depends on how much training data exists for each language, it can repeat biases, match public code and miss architectural issues beyond the immediate context. Pull request summaries do not refresh on their own, and in a Space only part of the content is processed.
Application card: GitHub Copilot inline suggestions ↗Application card: GitHub Copilot Chat ↗
GitHub follows Microsoft's six responsible AI principles: fairness, reliability and safety, privacy and security, inclusiveness, transparency and accountability. Application cards provide transparency about intended uses and limitations. For consequential decisions, such as housing or employment, affected people must be able to understand, appeal and correct the data behind a decision.
Microsoft and GitHub's six principles of responsible AI ↗Application card: GitHub Copilot Chat ↗
Possible harms: offensive content, insecure code, public code matches, data exfiltration and hidden instructions, plus overreliance on output. Mitigations: content filtering, blocking public code matches and IP scanning; for the cloud agent, a default firewall, pushes only to copilot/ branches, secrets only from the copilot environment and responses only to users with write access.
Application card: GitHub Copilot Agents ↗Application card: GitHub Copilot Chat ↗
Validate and operate AI tools
The user assumes the risks of generated code: bugs, vulnerabilities and IP infringement. Code can look valid yet be wrong or insecure, and generated tests may not cover every case. Understand each suggestion, review it, rely on linting, code scanning and IP scanning, and use Copilot code review as a complement to human review.
Best practices for using GitHub Copilot ↗Application card: GitHub Copilot inline suggestions ↗
Operating Copilot responsibly means launching Copilot CLI only from trusted directories, reviewing every command before approving it and granting minimal permissions: --deny-tool overrides --allow-all-tools. Approving a tool for the whole session allows any use of it. Cloud agent tasks should be well scoped, and with BYOK, data is subject to the provider's policies.
About GitHub Copilot CLI ↗Application card: GitHub Copilot Agents ↗