Integration Guide

Enterprise-Grade Privacy for GitHub Copilot

GitHub Copilot transmits code context to Microsoft Azure OpenAI. Pretense ensures proprietary identifiers never leave your environment unprotected.

under 10msadded latency

Local-firstnothing leaves your machine

5 minsetup time

Byte-exactreversal guaranteed

How to Protect GitHub Copilot in 3 Steps

One environment variable. No code changes. No workflow disruption.

Run npm install -g pretense. The proxy starts on localhost:9339.

Add github.copilot.advanced.debug.overrideProxyUrl to your VS Code settings.

Every Copilot completion request is logged and mutated. Export SOC2/HIPAA compliance reports.

Pretense transforms your real identifiers into synthetic tokens before transmission. The LLM sees structure and logic, not your proprietary names.

Without Pretense: raw identifiers exposed

// Before Pretense mutation
async function getUserPaymentToken(userId: string) {
  return await stripeClient.createToken(userId, STRIPE_SECRET);
}

Your function names, secrets, and architecture are transmitted verbatim.

With Pretense: synthetic identifiers only

// After Pretense mutation (what the LLM sees)
async function _fn4a2b(_v8c3d: string) {
  return await _v2f1a._fn9e4b(_v8c3d, _v7d2c);
}

Structure intact. LLM quality preserved. Your IP stays private.

After the LLM responds, Pretense reverses every mutation. You receive real, working code with your original identifiers restored byte-for-byte.

terminal

$ npm install -g pretense

$ pretense init

$ pretense start

NOTE

Set OPENAI_BASE_URL=http://localhost:9339 in VS Code settings

Is this compatible with GitHub Copilot Enterprise?

Yes. Pretense works at the HTTP proxy layer, compatible with all Copilot tiers.

What about Copilot Chat?

Copilot Chat goes through the same API endpoint. Pretense protects all Copilot traffic.

Can my security team audit Pretense?

Yes. Pretense provides full documentation of the mutation algorithm and audit log schema for enterprise security review.

No code changes. No workflow disruption. One environment variable and Pretense intercepts every request.

No credit card required. 30-second setup. Local-first, nothing leaves your machine.