Add configuration for activation GitHub token#19427
Conversation
…s and status comments Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
…ithub-app Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Done in f55d268. The reaction step is now in the activation job alongside the status comment step. Key changes:
Warning Firewall rules blocked me from connecting to one or more addresses (expand for details)I tried to connect to the following addresses, but was blocked by firewall rules:
If you need me to access, download, or install something from one of these locations, you can either:
|
|
@copilot enable status-comment on smoke-copilot |
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Done in 0e5f738. Added |
Adds support for configuring a custom GitHub token or GitHub App in the
on:section of workflow frontmatter. The token is used in the activation job for both reactions and status comments.New fields
Changes
main_workflow_schema.json): addedgithub-token(string) andgithub-app(object withapp-id,private-key,owner,repositories) to theon:objectrole_checks.go):extractActivationGitHubToken/extractActivationGitHubApppull the new fields from theon:map; wired into the orchestrator alongsideextractRoles/extractBotscompiler_activation_job.go): the reaction step is now in the activation job alongside the status comment step, so both use the same configured token. A singleGenerate GitHub App token for activationstep (id: activation-app-token) is minted once before both steps whenon.github-appis set.compiler_pre_activation_job.go): removed the reaction step and theissues/pull-requests/discussions: writepermissions that were there solely for reactionssafe_outputs_app.go):buildActivationAppTokenMintStepandresolveActivationTokenencapsulate token-minting and resolution logic (app token → custom token →GITHUB_TOKEN)compiler_safe_outputs.go,frontmatter_extraction_yaml.go):github-tokenandgithub-appare filtered/commented out from the emittedon:block, matching the treatment ofreaction,stop-after, etc..github/workflows/smoke-copilot.md): addedgithub-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}to exercise the new feature end-to-end; the compiled lock file now uses this token for both the reaction and status-comment steps in the activation job🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.