canary/.github/copilot
Eduardo Dantas 8b08da5ebf
feat: add admin-gated Copilot issue workflow (#3916)
Documentation:
• Added Copilot agent guidance and usage instructions for the Canary
project, including preferred workflows, scoped change practices,
validation tips, and a README describing manual and automated assignment
flows.

Chores
•  Added an automated workflow enabling authorized maintainers to assign
Copilot to fix issues via manual dispatch or a specific issue comment;
includes permission checks, input validation, and assignment
feedback/comments.
2026-04-30 20:56:56 -03:00
..
README.md feat: add admin-gated Copilot issue workflow (#3916) 2026-04-30 20:56:56 -03:00

Copilot Issue Agent

This repository is configured for GitHub Copilot cloud agent. It does not require an OpenAI API key.

Manual Usage

Repository administrators with GitHub Copilot access can assign an issue to Copilot from the issue sidebar:

  1. Open the issue.
  2. Choose Assignees.
  3. Select Copilot.
  4. Use main as the base branch unless a maintainer wants another branch.
  5. Select the canary-bugfix agent when available.
  6. Add focused instructions for the bug.

For issue #3552, use:

Fix the highscore pagination bug introduced after PR #3222. Keep the change focused and add or update tests if practical.

Slash Command

After .github/workflows/copilot-issue-fix.yml is on the default branch, repository administrators can comment this exact command at the start of an issue comment:

/copilot fix

Optional extra instructions can be added below the command in the same comment.

The workflow checks that both the actor and triggering actor have repository admin permission before attempting to assign Copilot. It uses GitHub credentials only and does not use OpenAI API secrets.

If GitHub does not allow the default Actions token to assign Copilot in this repository, keep using the manual assignment flow above. A maintainer can later add a narrowly scoped GitHub token as COPILOT_ASSIGN_TOKEN, but that is optional and should only be done if the slash command is worth the additional credential management.