Skip to content

Commit 99e30a3

Browse files
authored
[copilot-opt] Enforce MCP-only GitHub reads by removing direct gh API paths (#27358)
1 parent 4d620b3 commit 99e30a3

7 files changed

Lines changed: 43 additions & 48 deletions

.github/workflows/copilot-opt.lock.yml

Lines changed: 14 additions & 17 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.github/workflows/copilot-opt.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -67,6 +67,7 @@ These paths are populated by imported setup components:
6767

6868
## Hard Requirements
6969

70+
0. **Never use direct GitHub CLI API reads** (`gh api`, `gh repo view`, `gh pr list`) in analysis steps. Use MCP `github` tools for GitHub reads.
7071
1. Process **all available sessions** in the last 14 days (deterministic; no sampling unless data is too large to load in one pass).
7172
2. Parse session event data from `events.jsonl` when available.
7273
3. Detect these classes of issues:

.github/workflows/copilot-session-insights.lock.yml

Lines changed: 13 additions & 13 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)