docs: update fine-grained PAT repository access instructions for Copi…#18682
docs: update fine-grained PAT repository access instructions for Copi…#18682
Conversation
…lot authentication
There was a problem hiding this comment.
Pull request overview
Updates Copilot authentication documentation for fine-grained PAT setup, specifically around how to choose repository access scope.
Changes:
- Adjusts guidance on fine-grained PAT Repository access selection to emphasize least-privilege (select specific repos) while noting public repos as an option.
- Removes an embedded video walkthrough for creating a Copilot-permission PAT.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
Hey @mnkiefer 👋 — thanks for the docs cleanup on the fine-grained PAT setup instructions! Simplifying the auth guide and trimming the embedded video is a thoughtful improvement. That said, there's a process concern that needs addressing before this can move forward:
Suggested next steps
If you'd like a head start on the issue plan, here's a ready-to-use prompt:
|
| [**Create a fine-grained PAT**](https://github.com/settings/personal-access-tokens/new?name=COPILOT_GITHUB_TOKEN&description=GitHub+Agentic+Workflows+-+Copilot+engine+authentication&user_copilot_requests=read) (this link pre-fills the token name, description, and Copilot Requests permission). Verify the following settings before generating: | ||
|
|
||
| 1. **Resource owner** is your **user account**, not an organization. | ||
| 2. **Repository access** is set to **Public repositories**, even if you will be using it with private repositories. This is required for the "Copilot Requests" permission to be available. |
There was a problem hiding this comment.
This should be bolded. Half the room in my team changed the setting.
COPILOT_GITHUB_TOKENsetup instructions:/cc @dsyme