Refactor CI workflows: streamline triggers, enhance Dependabot metadata fetching, and add repo-token for usage report

Author: austenstone

.github/workflows/ci.yml

@@ -2,16 +2,14 @@ name: Fake CI
 
 on:
   workflow_dispatch:
-  # push:
-  #   branches:
-  #     - main
+  pull_request:
+    branches:
+      - main
 
 jobs:
   build:
     runs-on: ubuntu-latest
 
     steps:
-      # - uses: actions/checkout@v5
-      - run: echo "Hello, world!"
       - run: echo "Hello, world!"
       - run: exit 1

.github/workflows/copilot-dependabot-update.yml

@@ -9,13 +9,9 @@ jobs:
     if: github.event.pull_request.user.login == 'dependabot[bot]'    
     steps:
       - uses: actions/checkout@v6
-
       - name: Fetch Dependabot metadata
         id: metadata
         uses: dependabot/fetch-metadata@v2
-        with:
-          copilot-token: ${{ secrets.GITHUB_TOKEN }}
-
       - name: Generate dependency analysis with Copilot
         uses: austenstone/copilot-cli@main
         env:
@@ -47,10 +43,16 @@ jobs:
             
             ### 2. Provided Context
 
+            #### Dependabot Metadata
             ```json
             ${{ toJson(steps.metadata.outputs) }}
             ```
             
+            #### Event Data
+            ```event
+            ${{ toJson(github.event) }}
+            ```
+
             ### 3. Your Tasks
             
             Based on the context provided above:

.github/workflows/copilot-triage.yml .github/workflows/copilot-labeler.yml.github/workflows/copilot-triage.yml renamed to .github/workflows/copilot-labeler.yml

@@ -1,52 +1,25 @@
 on:
-  workflow_call:
-  schedule:
-    - cron: '0 * * * *' # Runs every hour
   issues:
-    types: [opened, edited, reopened]
+    types: [opened]
   pull_request:
+    types: [opened]
     branches:
       - 'main'
-  workflow_dispatch:
 
 jobs:
   triage:
     runs-on: ubuntu-latest
     timeout-minutes: 7
-    outputs:
-      available_labels: '${{ steps.get_labels.outputs.available_labels }}'
-      selected_labels: '${{ env.SELECTED_LABELS }}'
     permissions:
       contents: 'read'
       id-token: 'write'
       issues: 'read'
       pull-requests: 'read'
     steps:
-      - name: 'Get repository labels'
-        id: get_labels
-        uses: 'actions/github-script@main'
-        with:
-          script: |-
-            const { data: labels } = await github.rest.issues.listLabelsForRepo({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-            });
-
-            if (!labels || labels.length === 0) {
-              core.setFailed('There are no issue labels in this repository.')
-            }
-
-            const labelNames = labels.map(label => label.name).sort();
-            core.setOutput('available_labels', labelNames.join(','));
-            core.info(`Found ${labelNames.length} labels: ${labelNames.join(', ')}`);
-            return labelNames;
       - uses: austenstone/copilot-cli@main
-        if: steps.get_labels.outputs.available_labels != ''
         env:
-          GITHUB_TOKEN: '' # Do NOT pass any auth tokens here since this runs on untrusted inputs
           ISSUE_TITLE: '${{ github.event.issue.title }}'
           ISSUE_BODY: '${{ github.event.issue.body }}'
-          AVAILABLE_LABELS: '${{ steps.get_labels.outputs.available_labels }}'
         with:
           copilot-token: ${{ secrets.PAT }}
           prompt: |
@@ -61,11 +34,6 @@ jobs:
 
             ## Input Data
 
-            **Available Labels** (comma-separated):
-            ```
-            ${{ env.AVAILABLE_LABELS }}
-            ```
-
             **Issue Title**:
             ```
             ${{ env.ISSUE_TITLE }}
@@ -83,6 +51,8 @@ jobs:
 
             ## Steps
 
+            0. Fetch possible labels from the repository.
+
             1. Review the issue title, issue body, and available labels provided above.
 
             2. Based on the issue title and issue body, classify the issue and choose all appropriate labels from the list of available labels.

.github/workflows/copilot-research.yml

@@ -1,6 +1,6 @@
 on:
   issues:
-    types: [opened, edited, reopened]
+    types: [opened]
 
 jobs:
   research:

.github/workflows/copilot-security-triage.yml

@@ -9,6 +9,7 @@ jobs:
       - uses: austenstone/copilot-cli@main
         with:
           copilot-token: ${{ secrets.PAT }}
+          enable-all-github-mcp-tools: true
           prompt: |
             ## Role
 

.github/workflows/copilot-usage-report.yml

@@ -8,6 +8,7 @@ jobs:
       - uses: austenstone/copilot-cli@main
         with:
           copilot-token: ${{ secrets.PAT }}
+          repo-token: ${{ secrets.PAT }}
           prompt: |
             ## Role