Repository navigation
Surface approval-gated Copilot workflows on PRs - #74914
Conversation
…run policy Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>
|
@copilot Keep the docs, remove the workflow |
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Removed the approval-reporting workflow and its test/wiring while keeping the approval-policy guidance. Commit: |
|
✅ Test Quality Sentinel completed test quality analysis. Test Quality SentinelOutcome: The agent completed and reported no action. A no-op output alone does not verify that all required work was completed or that publication was possible. Agent messages are omitted from this comment. The category uses structured run status, not interpretation of agent prose.
|
There was a problem hiding this comment.
🟡 Changes recommended
The documentation-only diff omits the promised PR status reporting and reconciliation, so Fixes #72153 would close the issue without implementing the requested functionality.
2 open issues
What changed in this PR
This documentation-only change explains how to resolve approval-gated Copilot workflow runs in gh-aw repositories.
Changes:
- Describes
action_requiredruns and manual approval steps. - Documents the administrator-controlled automatic-run policy and its security implications.
| File | Description |
|---|---|
docs/src/content/docs/troubleshooting/common-issues.md |
Adds Copilot workflow approval troubleshooting, policy guidance, and a security warning. |
Review effort: Max (auto)
| > [!NOTE] | ||
| > Organization policies override repository settings. Contact admins if settings are grayed out. | ||
|
|
||
| ### Copilot Pull Request Workflows Require Approval |
|
|
||
| **Solution:** Review the proposed changes, especially workflow changes, then select **Approve and run workflows** in the pull request's merge box. Changing a job's `if:` condition, adding `trusted-users`, or granting token permissions cannot bypass this pre-execution gate. | ||
|
|
||
| To reduce repeated approvals, a repository administrator can disable **Require approval for workflow runs** under **Settings → Copilot → Cloud agent → Policies**. This is a repository setting, not gh-aw frontmatter or an actor allowlist. See [configuring automatic workflow runs](https://docs.github.com/en/copilot/how-tos/use-copilot-agents/cloud-agent/configuring-agent-settings#allowing-github-actions-workflows-to-run-automatically-when-copilot-pushes). |
|
🎉 This pull request is included in a new release. Release: |


40% of sampled Copilot-branch runs stopped at
action_required, leaving PRs without CI feedback and requiring maintainer intervention.