I’m curious if enterprise customers would have license concerns about the code produced from using this.
Have any big companies set policies on employees using these kind of tools? Do they allow them?
GitHub Copilot for Business is now available
31–40 of 127 posts
Re: GitHub Copilot for Business is now available
#32Is Copilot HIPAA compliant? It sends data to the cloud, so if you paste PHI…
[deleted]
Re: GitHub Copilot for Business is now available
#33Earlier quoted context omitted.
Yes, thank you this is exactly what I was looking out for in the announcement. Was looking for a way to instruct CodePilot to abide by the following rules: - Only use Apache v2, MIT or BSD licensed work for its recommendations. (Or a specific license set) - Only use code trained on public repositories. - Provide code attributions of the source code where the recommendations originate from. I'm not sure if the last po…
> Only use Apache v2, MIT or BSD licensed Even if you use code under these license, you are still supposed to credit the authors by reproducing the license. So you need to know where it came from. Do you credit all the software the model was trained on?
We're not using any ML based machine generated source code.
The remaining use of OSS code has attributions.
Re: GitHub Copilot for Business is now available
#34Sadly, "simple license management" here just refers to "who in your organization has a license to use this tool", rather than "where did this code come from and what license is it under". This tool remains the equivalent of money laundering for violation of Open Source licenses (or software licenses in general).
Yeah we were told not to use it by the lawyers at work and have an official policy against using it. Not having that would open us up for liability if we’re sued as there’s no defence that what we did was clean room if we admitted using it. We’ll hang back until other companies have litigated their way to some legislation around it.
Same here. Told to steer clear of this (in fairness, not only CoPilot, also ChatGPT and stuff), until somebody else pipeclean this in the courts.
No matter what is said, there are no license guarantees on the generated code, as you don’t know the exact provenance, so it seems only sensible to be on the safe side.
Re: GitHub Copilot for Business is now available
#35Sadly, "simple license management" here just refers to "who in your organization has a license to use this tool", rather than "where did this code come from and what license is it under". This tool remains the equivalent of money laundering for violation of Open Source licenses (or software licenses in general).
> This tool remains the equivalent of money laundering for violation of Open Source licenses
That's what a good chunk of people do anyway at work. No one really cares nor will care. We were already moving in that direction anyway this will just accelerate it.
Re: GitHub Copilot for Business is now available
#36Is Copilot HIPAA compliant? It sends data to the cloud, so if you paste PHI…
Not an answer to your overall question of compliance, but to the specific point:
> Copilot for Business does not retain any telemetry or Code Snippets Data.
https://docs.github.com/en/copilot/configuring-github-copilo...
Re: GitHub Copilot for Business is now available
#37Earlier quoted context omitted.
Yes, thank you this is exactly what I was looking out for in the announcement. Was looking for a way to instruct CodePilot to abide by the following rules: - Only use Apache v2, MIT or BSD licensed work for its recommendations. (Or a specific license set) - Only use code trained on public repositories. - Provide code attributions of the source code where the recommendations originate from. I'm not sure if the last po…
> Only use Apache v2, MIT or BSD licensed Even if you use code under these license, you are still supposed to credit the authors by reproducing the license. So you need to know where it came from. Do you credit all the software the model was trained on?
> Do you credit all the software the model was trained on.
That's a brilliant idea everyone can just copy and past the exact same attribution file and be done with it.
Re: GitHub Copilot for Business is now available
#38Sadly, "simple license management" here just refers to "who in your organization has a license to use this tool", rather than "where did this code come from and what license is it under". This tool remains the equivalent of money laundering for violation of Open Source licenses (or software licenses in general).
Where's the part of the Copilot EULA that indemifies users against copyright infringement for the generated code?
If the model was trained entirely using code that Microsoft has copyright over (for example: the MS Windows codebase, the MS Office codebase, etc.) then they could offer legal assurances that they have usage rights to the generated code as derivative works.
Without such assurances, how do you know that the generated code is not subject to copyright and what license the generated code is under?
Are you comfortable risking your company's IP by unknowingly using AGPLv3-licensed code [1] that Copilot "generated" in your company's products?
[1] https://en.wikipedia.org/wiki/GNU_Affero_General_Public_Lice...
Re: GitHub Copilot for Business is now available
#39So is the new Codex model not available for individuals? That's what they seem to imply in the blog announcement but thats not a difference they highlight on their landing page between the two plans.
Re: GitHub Copilot for Business is now available
#40Yeah I'll pay for something that is just slightly better/faster than writing it myself but will practically speaking steal my code and give it to others that pay for the same product. /s I'd say no thanks. I think programmers using Copilot is paying for something that'll hurt them in the long run for a tiny benefit in the short run. I don't trust Microsoft, and neither should you.
Their training data comes from repos, not from you using the tool.
Well yes, but I use repos just as any other dev does. Most of my own projects I have converted to Gitlab, but still some projects still exist on Github.