Skip to content

allow copilot use actions token#900

Merged
Soph merged 3 commits intomainfrom
soph/fix-copilot-token
Apr 9, 2026
Merged

allow copilot use actions token#900
Soph merged 3 commits intomainfrom
soph/fix-copilot-token

Conversation

@Soph
Copy link
Copy Markdown
Collaborator

@Soph Soph commented Apr 9, 2026

Entire-Checkpoint: 98cf12e97696


Note

Medium Risk
Expands GitHub Actions permissions (copilot-requests: write) and injects GITHUB_TOKEN into E2E steps, which can affect workflow security and token usage.

Overview
Updates the e2e.yml GitHub Actions workflow to grant copilot-requests: write and to pass the GitHub Actions GITHUB_TOKEN into both the agent bootstrap and E2E test execution steps.

This enables E2E runs (notably copilot-cli) to authenticate using the workflow token rather than requiring only an external Copilot token.

Reviewed by Cursor Bugbot for commit f89d316. Configure here.

@Soph Soph requested a review from a team as a code owner April 9, 2026 14:32
Copilot AI review requested due to automatic review settings April 9, 2026 14:32
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the E2E GitHub Actions workflow to enable GitHub Copilot requests using the workflow’s Actions token.

Changes:

  • Adds copilot-requests: write to the workflow token permissions.
  • Exports GITHUB_TOKEN (${{ github.token }}) into the E2E bootstrap and test steps’ environments.

Copy link
Copy Markdown

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Comment @cursor review or bugbot run to trigger another review on this PR

Reviewed by Cursor Bugbot for commit f89d316. Configure here.

@Soph Soph force-pushed the soph/fix-copilot-token branch from f89d316 to 750d26b Compare April 9, 2026 14:42
gtrrz-victor
gtrrz-victor previously approved these changes Apr 9, 2026
Entire-Checkpoint: 98cf12e97696
Entire-Checkpoint: 5dfaa34cbbd7
@Soph Soph enabled auto-merge April 9, 2026 17:46
@Soph Soph merged commit a4c0c9d into main Apr 9, 2026
9 checks passed
@Soph Soph deleted the soph/fix-copilot-token branch April 9, 2026 17:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants