Remove `copilot-requests: true` feature from all agentic workflows by Copilot · Pull Request #19336 · github/gh-aw

Copilot · 2026-03-03T04:33:51Z

The copilot-requests: true feature flag (which injected copilot-requests: write permission and set S2STOKENS=true) has been removed from all agentic workflow .md files.

Changes

41 workflow .md files: Removed the features: block containing copilot-requests: true
165 .lock.yml files: Recompiled — permission injection and S2STOKENS=true no longer present

Before:

features:
  copilot-requests: true
---

After: (block removed entirely)

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw -pack /home/REDACTED/work/gh-aw/gh-aw/cmd/gh-aw/main.go (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw GO111MODULE x_amd64/vet git rev-�� --show-toplevel x_amd64/vet /usr/bin/git -json GO111MODULE x_amd64/link git (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha --show-toplevel node /usr/bin/git --check scripts/**/*.js 64/bin/go git conf�� user.name resolved$ /usr/bin/git -json GO111MODULE x_amd64/asm git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha k/gh-aw/gh-aw/pkg/cli config /usr/bin/git remote.origin.urgit rtcfg (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha -unreachable=false /tmp/go-build277990205/b046/vet.cfg 990205/b354/vet.cfg GOSUMDB GOWORK 64/bin/go /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -uns�� -unreachable=false /tmp/go-build277990205/b213/vet.cfg /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -json GO111MODULE 64/bin/go /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha te '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' ---errorsas build_command_test.go /opt/hostedtoolcache/go/1.25.0/x64/bin/gofmt --show-toplevel 64/pkg/tool/linurev-parse /usr/bin/git /opt/hostedtoolcache/go/1.25.0/x64/bin/gofmt -l runs/20260303-044347-34080/test-1299558043/.github/workflows pkg/workflow/engine_concurrency_test.go /home/REDACTED/go/bin/node pkg/workflow/enggit pkg/workflow/engrev-parse pkg/workflow/eng--show-toplevel node (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 1679816779/custom/workflows GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linu-buildtags (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha .github/workflows/test.md go /usr/bin/git -json GO111MODULE x_amd64/vet git conf�� user.name Test User /usr/bin/infocmp -json GO111MODULE x_amd64/vet infocmp (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git -json GO111MODULE 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git e-analyzer.md GO111MODULE w.test git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha runs/20260303-044300-29541/test-3771465807 -tests /usr/bin/git npx prettier --cgit GOPROXY 64/bin/go git 9902�� --show-toplevel 990205/b422/_testmain.go /opt/hostedtoolcache/node/24.13.1/x64/bin/node "prettier" --chegit sh 64/bin/go node (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha list --json /usr/bin/git --repo owner/repo 64/bin/go git rev-�� --show-toplevel sh (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git hub/workflows cfg 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git -json cfg 64/pkg/tool/linu--show-toplevel git (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE node /opt�� prettier --check 64/bin/go --ignore-path .prettierignore 64/bin/go ls (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha pkg/mod/github.c-errorsas GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go /opt/hostedtoolc/tmp/go-build277990205/b259/vet.cfg -o /tmp/go-build973817578/b391/_pkgGOINSECURE -trimpath 64/bin/go -p main -lang=go1.25 go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha che/go-build/23/-errorsas **/*.cjs 64/bin/go **/*.json --ignore-path ../../../.pretti-bool /opt/hostedtoolc-buildtags -o /tmp/go-build973-errorsas -trimpath 64/bin/go -p main -lang=go1.25 go (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha -bool -buildtags /usr/bin/git -errorsas -ifaceassert -nilfunc git -C /home/REDACTED/work/gh-aw/gh-aw rev-parse /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/compile "prettier" --chegit sh 64/bin/go /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha "prettier" --write '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' --ignore-path ../.git git /usr/bin/git rror ache/go/1.25.0/xrev-parse /usr/bin/git git init�� 64/pkg/tool/linu--noprofile git /usr/bin/git --show-toplevel 64/pkg/tool/linurev-parse /usr/bin/git git (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha s/test.md -importcfg 990205/b422/_pkg_.a -s -w -buildmode=exe git -C /home/REDACTED/work/gh-aw/gh-aw/.github/workflows rev-parse ache/node/24.13.1/x64/bin/node "prettier" --chegit sh 64/bin/go infocmp (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha v1.0.0 git /usr/bin/gh rror ache/go/1.25.0/xrev-parse run-script/lib/n--show-toplevel gh work�� list --json /usr/bin/gh --repo owner/repo /usr/bin/git gh (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq .object.sha -json GO111MODULE 990205/b147/vet.cfg GOINSECURE GOMOD GOMODCACHE /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linutest@example.com -uns�� -unreachable=false /tmp/go-build277990205/b040/vet.cfg 1/x64/bin/node GOSUMDB GOWORK 64/bin/go /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq .object.sha te '**/*.cjs' '**/*.ts' '**/*.json' --ignore-path ../../../.pret.prettierignore git /usr/bin/git --show-toplevel x_amd64/vet /usr/bin/git git rev-�� rite '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' --ignore-path ../../../.prettiergit git epo.git --show-toplevel bVUJdY3yiVqQ /usr/bin/git ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linuremote.origin.url (http block)
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� ormat:pkg-json --silent >/dev/null 2>&1 git /usr/bin/git --show-toplevel x_amd64/vet /usr/bin/infocmp--show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD 20ac1924 64/pkg/tool/linuTest User (http block)
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 git ules/.bin/node .github/workflowgit go /usr/bin/git git 8d51�� --show-toplevel git n-dir/node GOMODCACHE x_amd64/vet /opt/hostedtoolc--show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linuorigin (http block)
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 --jq bin/node .github/workflowgit go /usr/bin/git git 8d51�� --show-toplevel git 86_64/node user.name Test User /usr/bin/infocmp--show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� .." git 64/pkg/tool/linux_amd64/cgo --git-dir x_amd64/vet /opt/hostedtoolc--show-toplevel 64/pkg/tool/linux_amd64/cgo (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 git 86_64/node GOMODCACHE go /usr/bin/git git 1/x6�� --show-toplevel git 64/pkg/tool/linux_amd64/vet --show-toplevel x_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/pkg/tool/linu-nolocalimports GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linu/tmp/go-build277990205/b424/_testmain.go (http block)
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 git 1/x64/bin/npm --show-toplevel go /usr/bin/git git rev-�� --show-toplevel OT" ] && export 64/pkg/tool/linux_amd64/vet --show-toplevel x_amd64/vet /opt/hostedtoolc--show-toplevel 64/pkg/tool/linux_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 git /usr/bin/git user.name Test User /usr/bin/git git 1/x6�� --show-toplevel git 64/pkg/tool/linux_amd64/vet --get remote.origin.urrev-parse /usr/bin/git 64/pkg/tool/linux_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path npx prettier --cGOSUMDB GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go sh -c "prettier" --che-errorsas sh 64/bin/go "prettier" --wri/opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/a70c5eada06553e3510ac27f2c3bda9d3705bccb
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/a70c5eada06553e3510ac27f2c3bda9d3705bccb --jq .object.sha (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha tmatter-with-nested-objects.md GO111MODULE 64/pkg/tool/linu-importcfg GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linuTest User env 672950641/.github/workflows cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha etup-node/git/re.prettierignore N5inHPfiWbQ29M6A--log-level=error /usr/bin/git 990205/b405/mathsh /tmp/go-build277-c _.a git er --show-toplevel NVNgnGPLEQds7/eMdwFO3cBOLj36ZOwlHC/wPHmRHH07drGotDxh6_4/9rUbv3kNremote.origin.url /usr/bin/git k/gh-aw/gh-aw/.ggit -buildtags 1/x64/bin/node git (http block)
https://api.github.com/repos/githubnext/agentics/git/ref/tags/
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha (http block)
https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha -json GO111MODULE 64/pkg/tool/linu-importcfg GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linu/home/REDACTED/work/gh-aw/gh-aw/pkg/styles/theme_test.go env -json cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha ithub-script/git/ref/tags/v8 /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git -bool -buildtags 990205/b331/vet."prettier" --write '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' --ignore-path ../../../.prettierignore git inPa�� --show-toplevel /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linuowner=github /usr/bin/git -bool -buildtags /opt/hostedtoolc--show-toplevel git (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linu-buildtags env -json cfg 64/pkg/tool/linu-nilfunc GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linu-tests (http block)
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion /tmp/TestHashStagit x_amd64/vet /usr/bin/git git rev-�� *.json' '!../../../pkg/workflow/js/**/*.json' ---errorsas git k/_temp/uv-python-dir/bash --show-toplevel x_amd64/vet /opt/hostedtoolc--show-toplevel git (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOSUMDB GOWORK 64/bin/go sh -c "prettier" --che-errorsas sh 64/bin/go tierignore (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOSUMDB GOWORK 64/bin/go node /hom�� --check scripts/**/*.js 64/bin/go .prettierignore (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo modules/@npmcli/run-script/lib/node-gyp-bin/sh se 990205/b308/vet./home/REDACTED/work/gh-aw/gh-aw/actions/setup/js/node_modules/.bin/pre�� ache/go/1.25.0/x--write git rev-�� ath ../../../.pr**/*.json ache/go/1.25.0/x--ignore-path /usr/bin/git 4300-29541/test-sh /tmp/go-build277-c /opt/hostedtoolc"prettier" --write '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' ---errorsas git (http block)
https://api.github.com/repos/owner/repo/contents/file.md
- Triggering command: /tmp/go-build277990205/b383/cli.test /tmp/go-build277990205/b383/cli.test -test.testlogfile=/tmp/go-build277990205/b383/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE 817578/b395/impo-buildtags /hom�� che/go-build/b7/-errorsas **/*.cjs 64/bin/go **/*.json --ignore-path ../../../.pretti-bool /opt/hostedtoolc-buildtags (http block)
- Triggering command: /tmp/go-build1142951458/b383/cli.test /tmp/go-build1142951458/b383/cli.test -test.testlogfile=/tmp/go-build1142951458/b383/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true se 990205/b257/vet.-c 1/x64/bin/node git rev-�� --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/link k/_temp/uv-python-dir/node SameOutput396810sh GOPROXY 1/x64/bin/node git (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name run lint:cjs 64/bin/go GOSUMDB GOWORK 64/bin/go sh -c "prettier" --che-errorsas sh 64/bin/go "prettier" --wri/opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name ignore-path ../../../.prettierignore ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -json GO111MODULE /opt/hostedtoolc"prettier" --write '**/*.cjs' '**/*.ts' '**/*.json' --ignore-path ../../../.prettierignore git rev-�� --show-toplevel /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git -unreachable=falnode /tmp/go-build277/opt/hostedtoolcache/node/24.13.1/x64/bin/npx 990205/b287/vet.prettier git (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Remove the "copilot-requests: true" feature from all agentic workflows .md files. Recompile

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

…iles and recompile Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot

Pull request overview

Removes the copilot-requests: true feature flag from agentic workflow markdown definitions and recompiles the corresponding generated .lock.yml workflows to eliminate the injected copilot-requests: write permission and S2STOKENS=true.

Changes:

Removed the features: copilot-requests: true frontmatter block from agentic workflow .md files.
Recompiled generated .lock.yml workflows to drop copilot-requests: write and S2STOKENS=true.
Generated workflows now validate and use secrets.COPILOT_GITHUB_TOKEN for Copilot CLI execution.

Reviewed changes

Copilot reviewed 80 out of 80 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
.github/workflows/smoke-update-cross-repo-pr.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/smoke-update-cross-repo-pr.lock.yml	Recompiled workflow removing injected permissions/env and adding secret validation + secret-backed Copilot token usage.
.github/workflows/smoke-create-cross-repo-pr.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/smoke-create-cross-repo-pr.lock.yml	Recompiled workflow removing injected permissions/env and adding secret validation + secret-backed Copilot token usage.
.github/workflows/firewall-escape.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/firewall-escape.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/draft-pr-cleanup.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/draft-pr-cleanup.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/docs-noob-tester.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/docs-noob-tester.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/discussion-task-miner.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/discussion-task-miner.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/dictation-prompt.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/dictation-prompt.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/dev.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/dev.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/dev-hawk.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/dev-hawk.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/delight.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/delight.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/dead-code-remover.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/dead-code-remover.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/daily-workflow-updater.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/daily-workflow-updater.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/daily-testify-uber-super-expert.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/daily-testify-uber-super-expert.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/daily-syntax-error-quality.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/daily-syntax-error-quality.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/daily-secrets-analysis.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/daily-secrets-analysis.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/daily-repo-chronicle.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/daily-repo-chronicle.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/daily-news.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/daily-news.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/daily-mcp-concurrency-analysis.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/daily-mcp-concurrency-analysis.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/daily-malicious-code-scan.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/daily-malicious-code-scan.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/daily-file-diet.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/daily-file-diet.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/daily-copilot-token-report.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/daily-copilot-token-report.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/daily-compiler-quality.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/daily-compiler-quality.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/daily-cli-performance.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/daily-cli-performance.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/daily-assign-issue-to-user.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/daily-assign-issue-to-user.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/daily-architecture-diagram.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/daily-architecture-diagram.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/craft.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/craft.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/copilot-pr-prompt-analysis.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/copilot-pr-prompt-analysis.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/copilot-pr-nlp-analysis.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/copilot-pr-nlp-analysis.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/copilot-pr-merged-report.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/copilot-pr-merged-report.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/copilot-cli-deep-research.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/copilot-cli-deep-research.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/code-scanning-fixer.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/code-scanning-fixer.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/cli-consistency-checker.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/cli-consistency-checker.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/claude-code-user-docs-review.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/claude-code-user-docs-review.lock.yml	Recompiled workflow removing injected permissions/env (where applicable).
.github/workflows/ci-coach.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/ci-coach.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/breaking-change-checker.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/breaking-change-checker.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/brave.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/brave.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/auto-triage-issues.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/auto-triage-issues.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/artifacts-summary.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/artifacts-summary.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/archie.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/archie.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.
.github/workflows/agent-performance-analyzer.md	Removes `copilot-requests` feature flag from workflow definition frontmatter.
.github/workflows/agent-performance-analyzer.lock.yml	Recompiled workflow removing injected permissions/env and switching to secret-backed Copilot token usage.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-03-03T04:54:29Z

.github/workflows/smoke-update-cross-repo-pr.lock.yml

+      - name: Validate COPILOT_GITHUB_TOKEN secret
+        id: validate-secret
+        run: /opt/gh-aw/actions/validate_multi_secret.sh COPILOT_GITHUB_TOKEN 'GitHub Copilot CLI' https://github.github.com/gh-aw/reference/engines/#github-copilot-default
+        env:
+          COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}


This compiled workflow now requires the repository secret COPILOT_GITHUB_TOKEN (validated here and later used for COPILOT_GITHUB_TOKEN in the Copilot CLI step). This is a behavioral change beyond removing the copilot-requests: true feature flag; please ensure the secret is configured for all environments where this workflow runs and update the PR description/docs accordingly (or provide a supported fallback token source if intended).

Copilot · 2026-03-03T04:54:30Z

.github/workflows/smoke-create-cross-repo-pr.lock.yml

+      - name: Validate COPILOT_GITHUB_TOKEN secret
+        id: validate-secret
+        run: /opt/gh-aw/actions/validate_multi_secret.sh COPILOT_GITHUB_TOKEN 'GitHub Copilot CLI' https://github.github.com/gh-aw/reference/engines/#github-copilot-default
+        env:
+          COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}


This compiled workflow now requires the repository secret COPILOT_GITHUB_TOKEN (validated here and later used for COPILOT_GITHUB_TOKEN in the Copilot CLI step). This is a behavioral change beyond removing the copilot-requests: true feature flag; please ensure the secret is configured for all environments where this workflow runs and update the PR description/docs accordingly (or provide a supported fallback token source if intended).

Initial plan

5d8dc88

Copilot AI assigned Copilot and pelikhan Mar 3, 2026

Copilot started work on behalf of pelikhan March 3, 2026 04:36 View session

Remove copilot-requests: true feature from all agentic workflow .md f…

ea22863

…iles and recompile Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Remove copilot-requests feature from agentic workflows~~ Remove copilot-requests: true feature from all agentic workflows Mar 3, 2026

Copilot finished work on behalf of pelikhan March 3, 2026 04:50

github-actions bot mentioned this pull request Mar 3, 2026

Smoke Test: Copilot - 22608693288 #19337

Closed

pelikhan marked this pull request as ready for review March 3, 2026 04:50

Copilot AI review requested due to automatic review settings March 3, 2026 04:50

Copilot started reviewing on behalf of pelikhan March 3, 2026 04:51 View session

This was referenced Mar 3, 2026

Smoke Test: Copilot - 22608737181 #19340

Closed

Smoke Test: Claude - 22608693292 #19341

Closed

Copilot AI reviewed Mar 3, 2026

View reviewed changes

github-actions bot mentioned this pull request Mar 3, 2026

Smoke Test: Claude - 22608737171 #19342

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Remove `copilot-requests: true` feature from all agentic workflows#19336

Remove `copilot-requests: true` feature from all agentic workflows#19336
Copilot wants to merge 2 commits intomainfrom
copilot/remove-copilot-requests-feature

Copilot AI commented Mar 3, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Mar 3, 2026

Uh oh!

Copilot AI Mar 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

Copilot AI commented Mar 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Mar 3, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 3, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Mar 3, 2026 •

edited

Loading