From cdf7493f74b09891a1d956cbd839ea096feb1af7 Mon Sep 17 00:00:00 2001
From: Mara Nikola Kiefer <mnkiefer@github.com>
Date: Fri, 27 Feb 2026 13:48:57 +0100
Subject: [PATCH 1/2] docs: update fine-grained PAT repository access
 instructions for Copilot authentication

---
 docs/src/content/docs/reference/auth.mdx | 9 +--------
 1 file changed, 1 insertion(+), 8 deletions(-)

diff --git a/docs/src/content/docs/reference/auth.mdx b/docs/src/content/docs/reference/auth.mdx
index f39373dadf..2725f7d1c8 100644
--- a/docs/src/content/docs/reference/auth.mdx
+++ b/docs/src/content/docs/reference/auth.mdx
@@ -81,7 +81,7 @@ If using Copilot as your AI engine, you need a GitHub Actions Secret set to a Gi
 [**Create a fine-grained PAT**](https://github.com/settings/personal-access-tokens/new?name=COPILOT_GITHUB_TOKEN&description=GitHub+Agentic+Workflows+-+Copilot+engine+authentication&user_copilot_requests=read) (this link pre-fills the token name, description, and Copilot Requests permission). Verify the following settings before generating:
 
 1. **Resource owner** is your **user account**, not an organization.
-2. **Repository access** is set to **Public repositories**, even if you will be using it with private repositories. This is required for the "Copilot Requests" permission to be available.
+2. **Repository access** is set to the repositories that will use the workflow (recommended: select specific repos for least privilege; public repos is also valid if you want broader scope).
 3. Under **Permissions → Account permissions**, **Copilot Requests** is set to **Read**.
 4. Click **Generate token** and copy the token value.
 5. Add the PAT to your GitHub Actions repository secrets as `COPILOT_GITHUB_TOKEN`, either by CLI or GitHub UI.
@@ -90,13 +90,6 @@ If using Copilot as your AI engine, you need a GitHub Actions Secret set to a Gi
    gh aw secrets set COPILOT_GITHUB_TOKEN --value "<your-github-pat>"
    ```
 
-<Video
-  src="/gh-aw/videos/create-pat-user-copilot.mp4"
-  caption="Creating a fine-grained PAT for user-owned repositories with Copilot permissions"
-  aspectRatio="16:9"
-  silenced={true}
-/>
-
 **Troubleshooting**:
 
 If your workflow fails at the Copilot inference step even with the token set, verify that the token owner's account has an active Copilot license. See [Copilot License or Inference Access Issues](/gh-aw/troubleshooting/common-issues/#copilot-license-or-inference-access-issues) for a local diagnostic step.

From c851e4c778d0ad99597f5e2f42a8bcd581455055 Mon Sep 17 00:00:00 2001
From: Mara Nikola Kiefer <mnkiefer@github.com>
Date: Fri, 27 Feb 2026 14:13:12 +0100
Subject: [PATCH 2/2] simplify instructions

---
 docs/src/content/docs/reference/auth.mdx | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/docs/src/content/docs/reference/auth.mdx b/docs/src/content/docs/reference/auth.mdx
index 2725f7d1c8..5cfc19d393 100644
--- a/docs/src/content/docs/reference/auth.mdx
+++ b/docs/src/content/docs/reference/auth.mdx
@@ -81,10 +81,9 @@ If using Copilot as your AI engine, you need a GitHub Actions Secret set to a Gi
 [**Create a fine-grained PAT**](https://github.com/settings/personal-access-tokens/new?name=COPILOT_GITHUB_TOKEN&description=GitHub+Agentic+Workflows+-+Copilot+engine+authentication&user_copilot_requests=read) (this link pre-fills the token name, description, and Copilot Requests permission). Verify the following settings before generating:
 
 1. **Resource owner** is your **user account**, not an organization.
-2. **Repository access** is set to the repositories that will use the workflow (recommended: select specific repos for least privilege; public repos is also valid if you want broader scope).
-3. Under **Permissions → Account permissions**, **Copilot Requests** is set to **Read**.
-4. Click **Generate token** and copy the token value.
-5. Add the PAT to your GitHub Actions repository secrets as `COPILOT_GITHUB_TOKEN`, either by CLI or GitHub UI.
+2. Under **Permissions → Account permissions**, **Copilot Requests** is set to **Read**.
+3. Click **Generate token** and copy the token value.
+4. Add the PAT to your GitHub Actions repository secrets as `COPILOT_GITHUB_TOKEN`, either by CLI or GitHub UI.
 
    ```bash wrap
    gh aw secrets set COPILOT_GITHUB_TOKEN --value "<your-github-pat>"