---
title: "Let Copilot read your code without reading your secrets."
description: "GitHub Copilot reads your open files for context, including the ones with keys, tokens, and customer data. Locke keeps those out of what's sent upstream."
url: "https://sonomos.ai/for/github-copilot/"
source: "https://sonomos.ai/for/github-copilot/"
---

# Let Copilot read your code without reading your secrets.

Copilot sends context so its suggestions fit: the file you're in, nearby open files, surrounding code. It assembles that context itself, and a .env file, a hardcoded API key or a test fixture full of real customer records all count.

Nobody thinks "I am now transmitting this secret." They keep typing while the assistant pulls in whatever is open. Secret scanning catches credentials once they're committed. The leak to the AI happens earlier, at suggestion time.

Locke works at that earlier moment. It masks credentials and sensitive data in the assembled context before it goes upstream. The completions still come, and the secrets stay on your laptop.

## The risk with GitHub Copilot

Copilot pulls open files into its context automatically, including ones that hold API keys, connection strings and customer data. Secrets can leave the machine without the developer ever deciding to share them.

## How Locke helps

Locke detects secrets and sensitive data in the context being assembled and masks them before transmission. The Sonomos Early Access desktop app screens GitHub Copilot's traffic through its local proxy today. The protection reaches your IDE, where the leak happens, as well as the browser.

## Locke is free for one person

It runs on your device and masks sensitive data before a prompt is sent, on the AI tools it covers. Teams starts at $14.99 per seat a month.

[Download Locke](https://sonomos.ai/downloads/)[Talk to the team](https://sonomos.ai/contact/)

## Locke for other AI tools

- [Locke for ChatGPT](https://sonomos.ai/for/chatgpt/)
- [Locke for Claude](https://sonomos.ai/for/claude/)
- [Locke for Gemini](https://sonomos.ai/for/gemini/)
- [Locke for Cursor](https://sonomos.ai/for/cursor/)
- [Locke for Ollama](https://sonomos.ai/for/ollama/)
- [Locke for Perplexity](https://sonomos.ai/for/perplexity/)
- [Locke for Microsoft Copilot](https://sonomos.ai/for/microsoft-copilot/)

## Reading on GitHub Copilot

- [Is GitHub Copilot HIPAA Compliant? A 2026 Guide for Healthcare Developers](https://sonomos.ai/blog/is-github-copilot-hipaa-compliant-2026/)
- [Source Code in AI Coding Assistants: Keeping Secrets Out of Copilot, ChatGPT, and Claude](https://sonomos.ai/blog/source-code-ai-coding-assistants-engineering-security/)