Specifically, section D.4 [1] of Github's terms of service. That agreement gives them the right to parse or analyze source code. Sounds very much like it justifies training copilot.

[1] https://docs.github.com/en/site-policy/github-terms/github-t...