免费在 GitHub 公开

copilot-github-actions

Automate GitHub Copilot CLI in GitHub Actions workflows. USE FOR: installing/running `copilot -p` in workflow steps, choosing GITHUB_TOKEN vs a personal access token (COPILOT_GITHUB_TOKEN) for authentication, setting the copilot-requests write permission, minimal-permission tool allowlisting (--allow-tool, --deny-tool, --no-ask-user, -s/--silent, --output-format=json), triggers (schedule, workflow_dispatch, push), the recommended GitHub Agentic Workflows (gh-aw) alternative to direct CLI invocation, and security/cost considerations (fork PR prompt-injection risk, billing attribution, cost centers). DO NOT USE FOR: embedding the Copilot agent runtime into your own application (use copilot-sdk instead); general GitHub Actions authoring unrelated to Copilot; the Copilot code review or PR features outside of CLI automation.

中文简介正在准备中。当前显示原文说明。

NetFabric/NetFabric.Numerics星标 36(GitHub 36 + cccskills 0)

集成工具GitHub

实测评分未实测

查看安装方法

包含的文件（5）

SKILL.md3.8 KB
references/authentication.md2.8 KB
references/cli-invocation-patterns.md3.2 KB
references/gh-aw-vs-direct.md2.7 KB
references/security-and-cost.md2.3 KB

SKILL.md（原文）

安装前可以查看交给 AI 代理的指令内容。

Copilot CLI + GitHub Actions

Run copilot (the GitHub Copilot CLI) as a step in a GitHub Actions workflow to automate AI-powered tasks in CI/CD — summaries, reports, reviews, scaffolding.

Core concepts

Concept	Description
Workflow pattern	Trigger → checkout/setup → install CLI → authenticate → run `copilot -p PROMPT`
Programmatic mode	`-p`/`--prompt` runs one prompt non-interactively and exits; no TTY needed
`GITHUB_TOKEN` auth	Built-in Actions token; no secrets to manage; needs `copilot-requests: write` permission
PAT auth	Fine-grained PAT with "Copilot Requests" permission, passed via `COPILOT_GITHUB_TOKEN` secret
Token precedence	`COPILOT_GITHUB_TOKEN` > `GH_TOKEN` > `GITHUB_TOKEN`
GitHub Agentic Workflows (`gh-aw`)	Recommended layer over raw CLI invocation; adds guardrails for automated/untrusted contexts
Least privilege	Scope `permissions:`, use `--allow-tool`/`--deny-tool` instead of `--allow-all`/`--yolo`

Minimal example (direct CLI invocation)

name: Daily summary
on:
  workflow_dispatch:
  schedule:
    - cron: '30 17 * * *'
permissions:
  contents: read
  copilot-requests: write
jobs:
  daily-summary:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
        with: { fetch-depth: 0 }
      - run: npm install -g @github/copilot
      - name: Run Copilot CLI
        run: |
          copilot -p "Summarize today's commits, with links, under 100 words. Write to summary.md" \
            --allow-tool='shell(git:*)' --allow-tool=write --no-ask-user -s
          cat summary.md >> "$GITHUB_STEP_SUMMARY"
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Workflow: automate a task

Decide direct CLI invocation vs. GitHub Agentic Workflows (recommended for most cases) → gh-aw-vs-direct.md
Choose auth: GITHUB_TOKEN (org policy required) or a PAT via COPILOT_GITHUB_TOKEN → authentication.md
Write the prompt/step with minimal permissions and a scoped tool allowlist → cli-invocation-patterns.md
Review triggers and cost attribution before enabling on fork-PR events or org-wide → security-and-cost.md

Reference Files

File	Load When
references/authentication.md	Setting up GITHUB_TOKEN vs PAT auth, org policy, token precedence
references/cli-invocation-patterns.md	Writing the workflow step: prompt options, tool allowlists, output capture, shell patterns
references/gh-aw-vs-direct.md	Deciding between raw `copilot` steps and GitHub Agentic Workflows
references/security-and-cost.md	Fork PR risk, prompt injection, least privilege, billing/cost centers

评价

还没有评价。欢迎分享你的使用感受。

无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

同一仓库的技能

3d-rotation-theory

免费

Abstract math for 3D rotation representations and conversions. USE FOR: understanding axis-angle representation; Euler angles (yaw/pitch/roll, convention choices); rotation matrices (SO(3)); quaternion-based rotation; converting between representations; identifying and avoiding gimbal lock; composing rotations; half-angle formula; right-hand rule. DO NOT USE FOR: quaternion arithmetic details (use quaternion-algebra); slerp/lerp interpolation (use interpolation-on-manifolds); coordinate system definitions (use coordinate-system-conversions).

中文简介正在准备中。当前显示原文说明。