PS Pursuit Firewall Allowlist: what addresses to allowlist for GitHub Copilot Agent

Ecosystem
#1

I am working with GitHub Copilot and PureScript.

By default, GitHub Copilot has a firewall, to prevent the Agent from reaching unknown destinations.

This firewall breaks spago build; Spago is unable to pull packages. Disabling the firewall fixes it.

The firewall’s allowlist can be customized: Customizing or disabling the firewall for GitHub Copilot coding agent - GitHub Docs

pursuit.purescript.org in the allowlist does not fix it. What else might I be missing? I have not bothered with github.com; I would think that is already included in the default allowlist…

Thanks

#2

Spago reaches out to GitHub, specifically the registry and registry-index repositories, and it reaches out to packages.registry.purescript.org to fetch package tarballs. Can you allowlist purescript.org as a domain?

1 Like
#3

That works! Thanks!

I have allowlisted the domain and 2 subdomains for good measure:

GitHub Copilot Agent can reach Pursuit through the firewall, now.