Skip to content
cccskills
FreePublished on GitHub

copilot-github-actions

Automate GitHub Copilot CLI in GitHub Actions workflows. USE FOR: installing/running `copilot -p` in workflow steps, choosing GITHUB_TOKEN vs a personal access token (COPILOT_GITHUB_TOKEN) for authentication, setting the copilot-requests write permission, minimal-permission tool allowlisting (--allow-tool, --deny-tool, --no-ask-user, -s/--silent, --output-format=json), triggers (schedule, workflow_dispatch, push), the recommended GitHub Agentic Workflows (gh-aw) alternative to direct CLI invocation, and security/cost considerations (fork PR prompt-injection risk, billing attribution, cost centers). DO NOT USE FOR: embedding the Copilot agent runtime into your own application (use copilot-sdk instead); general GitHub Actions authoring unrelated to Copilot; the Copilot code review or PR features outside of CLI automation.

The English summary is being prepared. Showing the original description.

NetFabric/NetFabric.Numerics36 stars(GitHub 36 + cccskills 0)
Works withGitHub

Run score Not tested

See how to install

Files included (5)

  • SKILL.md3.8 KB
  • references/authentication.md2.8 KB
  • references/cli-invocation-patterns.md3.2 KB
  • references/gh-aw-vs-direct.md2.7 KB
  • references/security-and-cost.md2.3 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Copilot CLI + GitHub Actions

Run copilot (the GitHub Copilot CLI) as a step in a GitHub Actions workflow to automate AI-powered tasks in CI/CD — summaries, reports, reviews, scaffolding.

Core concepts

ConceptDescription
Workflow patternTrigger → checkout/setup → install CLI → authenticate → run copilot -p PROMPT
Programmatic mode-p/--prompt runs one prompt non-interactively and exits; no TTY needed
GITHUB_TOKEN authBuilt-in Actions token; no secrets to manage; needs copilot-requests: write permission
PAT authFine-grained PAT with "Copilot Requests" permission, passed via COPILOT_GITHUB_TOKEN secret
Token precedenceCOPILOT_GITHUB_TOKEN > GH_TOKEN > GITHUB_TOKEN
GitHub Agentic Workflows (gh-aw)Recommended layer over raw CLI invocation; adds guardrails for automated/untrusted contexts
Least privilegeScope permissions:, use --allow-tool/--deny-tool instead of --allow-all/--yolo

Minimal example (direct CLI invocation)

name: Daily summary
on:
  workflow_dispatch:
  schedule:
    - cron: '30 17 * * *'
permissions:
  contents: read
  copilot-requests: write
jobs:
  daily-summary:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
        with: { fetch-depth: 0 }
      - run: npm install -g @github/copilot
      - name: Run Copilot CLI
        run: |
          copilot -p "Summarize today's commits, with links, under 100 words. Write to summary.md" \
            --allow-tool='shell(git:*)' --allow-tool=write --no-ask-user -s
          cat summary.md >> "$GITHUB_STEP_SUMMARY"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Workflow: automate a task

  1. Decide direct CLI invocation vs. GitHub Agentic Workflows (recommended for most cases) → gh-aw-vs-direct.md
  2. Choose auth: GITHUB_TOKEN (org policy required) or a PAT via COPILOT_GITHUB_TOKEN → authentication.md
  3. Write the prompt/step with minimal permissions and a scoped tool allowlist → cli-invocation-patterns.md
  4. Review triggers and cost attribution before enabling on fork-PR events or org-wide → security-and-cost.md

Reference Files

FileLoad When
references/authentication.mdSetting up GITHUB_TOKEN vs PAT auth, org policy, token precedence
references/cli-invocation-patterns.mdWriting the workflow step: prompt options, tool allowlists, output capture, shell patterns
references/gh-aw-vs-direct.mdDeciding between raw copilot steps and GitHub Agentic Workflows
references/security-and-cost.mdFork PR risk, prompt injection, least privilege, billing/cost centers

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Abstract math for 3D rotation representations and conversions. USE FOR: understanding axis-angle representation; Euler angles (yaw/pitch/roll, convention choices); rotation matrices (SO(3)); quaternion-based rotation; converting between representations; identifying and avoiding gimbal lock; composing rotations; half-angle formula; right-hand rule. DO NOT USE FOR: quaternion arithmetic details (use quaternion-algebra); slerp/lerp interpolation (use interpolation-on-manifolds); coordinate system definitions (use coordinate-system-conversions).

The English summary is being prepared. Showing the original description.

NetFabric/NetFabric.Numerics36Updated Aug 10, 2026

Design and scaffold multi-agent squads/swarms using the graph orchestration pattern (nodes = agents, edges = dependencies/data flow). USE FOR: designing a coordination topology for a multi-agent squad (sequential pipeline, parallel fan-out/aggregation, branching, feedback loop, cyclic); building an orchestrator agent that delegates to specialist agents; setting up an adversarial/tribunal code or document review with independent reviewers; scaffolding a squad's agent files for a target coding-agent harness (e.g. Copilot CLI or Claude Code custom agents). DO NOT USE FOR: authoring a single agent's frontmatter/prompt body (use copilot-cli-custom-agents, claude-code-custom-agents, or the target harness's own skill); SKILL.md authoring (use create-skill); ad-hoc multi-agent chat with no explicit topology.

The English summary is being prepared. Showing the original description.

NetFabric/NetFabric.Numerics36Updated Aug 10, 2026

Find, inspect, query, redact, and troubleshoot logs, transcripts, sessions, and OpenTelemetry data from coding-agent harnesses on Windows, macOS, Linux, and WSL. USE FOR: GitHub Copilot in VS Code; Copilot CLI; Claude Code; OpenAI Codex; Gemini CLI; OpenCode; Cursor, Windsurf, Kiro, or other VS Code-family editors; locating log files; diagnosing tool or model failures; correlating turns, subagents, and tool calls; querying JSONL, plaintext, or SQLite without spending model tokens; preparing sanitized diagnostics. DO NOT USE FOR: application logs unrelated to coding agents; uploading raw logs; treating unstable transcript schemas as public APIs.

The English summary is being prepared. Showing the original description.

NetFabric/NetFabric.Numerics36Updated Aug 10, 2026

Author and maintain AGENTS.md files — the open, tool-agnostic format for giving coding agents project context. Use when: creating AGENTS.md; writing an agent instructions file; root or nested AGENTS.md for monorepos; migrating CLAUDE.md, AGENT.md, .cursor/rules, or copilot-instructions.md to AGENTS.md; greenfield project setup before code exists; brownfield onboarding for an existing codebase; documenting build/test/lint commands, code style, PR/commit conventions, and security considerations for agents; AGENTS.md discovery and precedence rules. Works for any language, framework, or project size. DO NOT USE FOR: authoring SKILL.md skill files (use create-skill); APM package/plugin authoring (use apm-producer); language-specific style rules (use language skills e.g. csharp-best-practices).

The English summary is being prepared. Showing the original description.

NetFabric/NetFabric.Numerics36Updated Aug 10, 2026

Abstract math for angle measurement, unit systems, and circular arithmetic. USE FOR: implementing angle types; converting between degrees/radians/gradians/revolutions; reducing angles to canonical range [0, Full); computing reference angles and quadrants; implementing safe modular arithmetic with negative inputs; angle addition and subtraction; classifying angles by sign and size. DO NOT USE FOR: trigonometric functions (use trigonometric-functions); coordinate conversions (use coordinate-system-conversions); interpolation (use interpolation-on-manifolds).

The English summary is being prepared. Showing the original description.

NetFabric/NetFabric.Numerics36Updated Aug 10, 2026

Create and maintain Claude Code custom subagents (.claude/agents/*.md files). USE FOR: authoring project (.claude/agents/) or user (~/.claude/agents/) subagent files; frontmatter fields (name, description, tools, disallowedTools, model, permissionMode, maxTurns, skills, mcpServers, hooks, memory, background, effort, isolation, color, initialPrompt); writing descriptions that drive automatic delegation and 'use proactively' phrasing; invoking subagents via natural language, @-mention, session-wide --agent, or the Agent tool; restricting which subagent types a coordinator can spawn with Agent(name1, name2); nested subagents and depth limits; built-in subagents (Explore, Plan, general-purpose, claude); troubleshooting a subagent that won't load or isn't invoked. DO NOT USE FOR: GitHub Copilot CLI custom agents (use copilot-cli-custom-agents); agent teams/teammates (a different, session-spanning feature); MCP server authoring; SKILL.md authoring (use create-skill).

The English summary is being prepared. Showing the original description.

NetFabric/NetFabric.Numerics36Updated Aug 10, 2026

See all skills by NetFabric

Report a problem with this skill