Can GitHub Copilot See SQL Query Results in VSCode? Is there a source that I can cite that explicitly shows that this is or isn't the case?

[Wei-HaiMing]

Select Topic Area

Question

Body

If I am running SQL queries in VSCode, I want to make sure that GitHub Copilot does not have access to my database information as well as the query results that could contain sensitive information. If possible, I would also like to know if GitHub Copilot is in compliance with HIPAA.

[Aarush310]

hey bro,
From what I found, Copilot doesn’t send your runtime data or query results to GitHub, just the code you're typing. But still, it’s best to turn off Copilot for SQL files if you're dealing with sensitive or private data, just to be safe.

As for HIPAA compliance, Copilot isn’t officially HIPAA-compliant, so I wouldn’t trust it with anything health-related or private. Basically, it's fine for general coding help, but I’d keep it disabled in any project with sensitive data — just to be 100% sure.

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬

[Skaybeili]

Hi, I discovered that Copilot didn't send your query results to GitHub, nor did it send your execution data, nor did it send the code you wrote. I think it's best to disable Copilot for SQL files if you're working with private data, for security reasons.

Following HIPAA compliance, Copilot doesn't officially comply with its offerings. I wouldn't trust it with anything healthcare-related or private at the moment. Basically, it works well for general programming help, but for any project with sensitive data, I'd keep it on standby until I'm completely sure.

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬

[Skaybeili]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬

[Skaybeili]

Busquen los parámetros relacionados col algunos htts

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬

[tunate]

VScode有插件，你使用的那种运行插件支持调试？敏感数据的判定应该不是GitHub的工作，商业隐私数据也应该需要脱密之后才能发在GitHub上。副驾驶能否看到sql查询结果，你需要确定这个应用的查询结果显示在了哪里。

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬

[SIMARSINGHRAYAT]

Great security question. Let me clarify:

Short Answer: GitHub Copilot CANNOT see your SQL query results or database contents.

Sources to Cite:

1. GitHub Privacy Statement: https://docs.github.com/site-policy/privacy-policies/github-privacy-statement
2. GitHub Security Docs: https://docs.github.com/en/github-ae/content/admin/overview/github-ae-security-overview
3. Copilot Data Usage: https://github.com/features/copilot/trust

What Copilot CAN see:

• Your code (queries, schema definitions)
• Comments in your code
• File structure and project context

What Copilot CANNOT see:

• Database query results
• Output/console logs
• Runtime data or state
• Network traffic
• Database contents

Why it's Safe:

1. Copilot processes static code only
2. It doesn't execute your code
3. It doesn't have database access
4. Query results never leave your machine
5. VSCode handles execution locally

HIPAA Compliance:
Yes, Copilot can be used with HIPAA data IF:

• You use HIPAA-compliant GitHub Enterprise
• You don't paste sensitive data in prompts
• Database results stay local (never shared with Copilot)

Best Practice:
Don't paste actual query results in Copilot chat - only share code/schema. This is safe practice anyway.

Your code is safe to share - just avoid pasting actual sensitive data from results.

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬

[github-actions[bot]]

🕒 Discussion Activity Reminder 🕒

This Discussion has been labeled as dormant by an automated system for having no activity in the last 60 days. Please consider one the following actions:

1️⃣ Close as Out of Date: If the topic is no longer relevant, close the Discussion as out of date at the bottom of the page.

2️⃣ Provide More Information: Share additional details or context — or let the community know if you've found a solution on your own.

3️⃣ Mark a Reply as Answer: If your question has been answered by a reply, mark the most helpful reply as the solution.

Note: This dormant notification will only apply to Discussions with the Question label. To learn more, see our recent announcement.

Thank you for helping bring this Discussion to a resolution! 💬

[yatharthbhatt]

Hey man !
The answer depends on which Copilot features you're using and how your organization has configured them.

Copilot doesn't automatically get unrestricted access to your database just because you're running SQL in VS Code. It only sees the context that's available to the feature you're actively using (for example, the contents of the editor when requesting a completion or chat response). Query results or database connections aren't automatically sent unless they're part of the context being shared.

For the HIPAA part, I wouldn't assume Copilot is HIPAA-compliant by default. That depends on your organization's plan, data handling settings, and whether there's a Business Associate Agreement (BAA) in place. If you're working with PHI, it's worth getting confirmation from GitHub rather than relying on general documentation.

Hopefully someone from the GitHub team can clarify the exact data flow for SQL tools in VS Code and the current HIPAA guidance.