4 Commits

Author SHA1 Message Date
Devraj Mehta
0d854367d9 Add step to warn about unnecessary write permissions
Probes the github-token for write access to actions, checks, contents,
deployments, issues, packages, pages, pull-requests, security-events,
and statuses. Emits a visible warning if any write scopes are detected.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-16 23:14:29 -04:00
Devraj Mehta
9f29266402 Fix duplicate env key in Install Copilot CLI step
Merge GITHUB_TOKEN into the single env block to fix the 'env is already
defined' validation error in GitHub Actions.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-10 20:55:51 -04:00
Devraj Mehta
ce338b190a Use GitHub token to download Copilot CLI 2026-03-10 16:58:53 -04:00
Devraj Mehta
96dccc5ccc 💥 2026-03-10 14:29:42 -04:00