Add missing GitHub permissions for MCP toolset access #12104
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Static analysis flagged 5 workflows with missing GitHub permissions. These workflows configure GitHub MCP server toolsets (
issues,pull_requests,labels) but lack the corresponding permission declarations, causing runtime failures when accessing GitHub APIs.Changes
Added missing permissions based on configured toolsets:
issues: read,pull-requests: read(usescontext,repos,issues,pull_requeststoolsets)issues: read,pull-requests: read(usescontext,repos,issues,pull_requeststoolsets)issues: read(usespull_requests,repos,issues,labelstoolsets;labelsrequiresissuesscope)issues: read,pull-requests: read(usescontext,repos,issues,pull_requeststoolsets)Example
Before:
After:
Permission requirements are defined in
pkg/workflow/data/github_toolsets_permissions.json.Original prompt
✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.