Allowing GitHub Actions workflows to run automatically when Copilot pushes
By default, GitHub Actions workflows will not run automatically when Copilot pushes changes to a pull request.
GitHub Actions workflows can be privileged and have access to sensitive secrets. Inspect the proposed changes in the pull request and ensure that you are comfortable running your workflows on the pull request branch. You should be especially alert to any proposed changes in the .github/workflows/ directory that affect workflow files.
To allow GitHub Actions workflows to run, click the Approve and run workflows button in the pull request's merge box.
Optionally, you can configure Copilot coding agent to allow GitHub Actions workflows to run without human intervention.
Warning
Allowing GitHub Actions workflows to run without approval may allow unreviewed code written by Copilot to gain write access to your repository or access your GitHub Actions secrets.
-
On GitHub, navigate to the main page of the repository.
-
Under your repository name, click Settings. If you cannot see the "Settings" tab, select the dropdown menu, then click Settings.
-
In the "Code & automation" section of the sidebar, click Copilot then coding agent.
-
In the "Actions workflow approval" section, disable the Require approval for workflow runs setting.
