File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1+ # Configuration for actionlint, run by the `actionlint` job in
2+ # `.github/workflows/reusable-code-quality.yml`.
3+ paths :
4+ .github/workflows/**/*.{yml,yaml} :
5+ ignore :
6+ # `copilot-requests` is a real permission scope - it is what lets a
7+ # workflow authenticate the Copilot CLI with the built-in `GITHUB_TOKEN`
8+ # instead of a personal access token - but actionlint's hard-coded scope
9+ # list has not caught up with it yet, so it reports every use as unknown.
10+ # Drop this entry once actionlint ships the scope, and it will go back to
11+ # catching genuine typos in permission names.
12+ # See https://docs.github.com/en/copilot/how-tos/copilot-cli/use-copilot-cli-in-actions
13+ - ' unknown permission scope "copilot-requests"'
Original file line number Diff line number Diff line change @@ -17,7 +17,10 @@ permissions:
1717 issues : write
1818 pull-requests : write
1919 contents : read
20- models : read
20+ # A caller can only cap a reusable workflow's permissions, so the scope the
21+ # Copilot CLI needs has to be granted here too. `models: read` was for the
22+ # GitHub Models provider, which `actions/ai-inference` v3 removed.
23+ copilot-requests : write
2124 # A caller can only cap a reusable workflow's permissions, never raise them,
2225 # so `actions: write` has to be granted here for the dispatch job downstream
2326 # to work at all. The reusable workflow narrows it to that single job, so the
You can’t perform that action at this time.
0 commit comments