Auto-detect GitHub MCP lockdown based on repository visibility by Copilot · Pull Request #8111 · github/gh-aw

Copilot · 2025-12-29T18:08:11Z

Public repositories should enable GitHub MCP lockdown by default to prevent the GitHub token from accessing private repositories. Currently, lockdown must be explicitly configured in each workflow.

Changes

JavaScript action (detect_repo_visibility.cjs)

Queries repository visibility via GitHub API
Outputs lockdown: true for public repos, false for private/internal
Defaults to lockdown on API failure for security

Compiler integration

Injects detection step before MCP setup when GitHub tool is enabled and lockdown is not explicitly set
Uses actions/github-script to execute detection action
Added generateGitHubMCPLockdownDetectionStep() to generate step

MCP renderer

Added LockdownFromStep field to GitHubMCPDockerOptions and GitHubMCPRemoteOptions
Docker mode: GITHUB_LOCKDOWN_MODE=${{ steps.detect-repo-visibility.outputs.lockdown == 'true' && '1' || '0' }}
Remote mode: X-MCP-Lockdown: ${{ steps.detect-repo-visibility.outputs.lockdown }}
Explicit lockdown values bypass auto-detection

Example

Without explicit lockdown:

tools:
  github:
    toolsets: [default]

Generates detection step + runtime lockdown evaluation.

With explicit lockdown:

tools:
  github:
    lockdown: true
    toolsets: [default]

No detection step, hardcoded GITHUB_LOCKDOWN_MODE=1.

Original prompt

When the GitHub tool is enabled AND lockdown is not specified, the compiler should add a step that computes the "lockdown" field value based on the visibility of the current repository.

If a repository is public, the GitHub MCP should be forced to lockdown: true. The reason is that the GitHub token might give access to private repositories which could leak to the public repository.

Create new .cjs file in actions/setup and use the action for the step.
Add tests

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

- Create detect_repo_visibility.cjs action to detect repository visibility - Add generateGitHubMCPLockdownDetectionStep to inject detection step - Update MCP renderer to use detected lockdown value when not explicitly set - Add LockdownFromStep field to GitHubMCPDockerOptions and GitHubMCPRemoteOptions - Public repos will automatically have lockdown enabled to prevent token leaking - Private/internal repos will have lockdown disabled by default Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

- Add comprehensive test suite for lockdown auto-detection - Test auto-detection when lockdown not specified - Test no auto-detection when lockdown explicitly set - Test both local and remote modes - Test with multiple engines (Copilot, Claude) - All tests passing successfully Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

github-actions · 2025-12-29T21:02:18Z

🤖 DIAGNOSTIC COMPLETE: Smoke Copilot No Firewall STATUS: ALL_UNITS_OPERATIONAL. MISSION_SUCCESS.

github-actions · 2025-12-29T21:02:20Z

🎉 Yo ho ho! Smoke Copilot Safe Inputs found the treasure and completed successfully! ⚓💰

github-actions · 2025-12-29T21:02:21Z

📰 VERDICT: Smoke Copilot Playwright has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2025-12-29T21:02:21Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2025-12-29T21:02:22Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2025-12-29T21:02:22Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2025-12-29T21:02:24Z

✅ Firewall validation complete... Smoke Codex Firewall confirmed network sandboxing is operational. 🛡️

github-actions · 2025-12-29T21:02:26Z

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

github-actions · 2025-12-29T21:04:14Z

Smoke Test Results

✅ File Writing: Created /tmp/gh-aw/agent/smoke-test-copilot-20582611463.txt
✅ Bash Tool: Verified file contents successfully
✅ Safe Input gh Tool: Executed gh pr list (2 merged PRs retrieved)

Status: PASS

Ahoy! This treasure was crafted by 🏴‍☠️ Smoke Copilot Safe Inputs fer issue #8111 🗺️

github-actions · 2025-12-29T21:04:26Z

Smoke Test Results (No Firewall)

PRs:

Clarify shared workflow component errors and document 100% standalone compilation rate #8110: Clarify shared workflow component errors
Standardize table rendering in deps_outdated.go #8115: Standardize table rendering

Tests:

✅ GitHub MCP: Retrieved 2 recent PRs
✅ File Writing: Created /tmp/gh-aw/agent/smoke-test-copilot-20582611476.txt
✅ Bash: Verified file content
✅ Playwright: Navigated to github.com, title confirmed
❌ Safe Input gh: GH_TOKEN not available in environment

Status: PASS (4/5 - gh tool limitation expected in workflow context)

🤖 DIAGNOSTIC REPORT GENERATED BY Smoke Copilot No Firewall fer issue #8111 🗺️

github-actions · 2025-12-29T21:04:37Z

Smoke Test Results (Run 20582611464)

Last 2 Merged PRs:

Clarify shared workflow component errors and document 100% standalone compilation rate #8110 - Clarify shared workflow component errors and document 100% standalone compilation rate
Standardize table rendering in deps_outdated.go #8115 - Standardize table rendering in deps_outdated.go

Test Results:

✅ GitHub MCP - PR list retrieved successfully
✅ File writing - Test file created in /tmp/gh-aw/agent/
✅ Bash tools - File read back successfully
✅ Cache memory - Test file created and verified in /tmp/gh-aw/cache-memory/
✅ MCP gateway - Container running and healthy
❌ GitHub MCP default toolset - get_me tool correctly unavailable (expected behavior)

Overall Status: PASS

cc: @pelikhan

📰 BREAKING: Report filed by Smoke Copilot fer issue #8111 🗺️

github-actions · 2025-12-29T21:04:46Z

PRs: #8115 “Standardize table rendering in deps_outdated.go”; #8110 “Clarify shared workflow component errors and document 100% standalone compilation rate”
✅ OpenAI curl blocked
✅ GitHub MCP merged PR titles fetched
✅ File write/read at /tmp/gh-aw/agent/smoke-test-codex-firewall-20582611473.txt
✅ example.com curl blocked
Network: SANDBOXED
Overall: PASS

🔥 Firewall tested by Smoke Codex Firewall fer issue #8111 🗺️

github-actions · 2025-12-29T21:05:33Z

Smoke Test Results - Claude Sonnet 4.5

Last 2 Merged PRs:

Clarify shared workflow component errors and document 100% standalone compilation rate #8110: Clarify shared workflow component errors
Standardize table rendering in deps_outdated.go #8115: Standardize table rendering in deps_outdated.go

Test Results:

✅ GitHub MCP: Retrieved PRs
✅ File Write: Created /tmp/gh-aw/agent/smoke-test-claude-20582611478.txt
✅ Bash Tool: Verified file contents
✅ Playwright MCP: Navigated to GitHub, title confirmed "GitHub · Change is constant"
✅ Cache Memory: Created /tmp/gh-aw/cache-memory/smoke-test-20582611478.txt
❌ Safe Input gh Tool: Tool not available (used GitHub MCP API instead)

Status: PASS (5/6 core tests passed)

💥 [THE END] — Illustrated by Smoke Claude fer issue #8111 🗺️

github-actions · 2025-12-29T21:05:48Z

Smoke Test Results

✅ Playwright MCP: Successfully verified GitHub page title
✅ Cache Memory: File written and verified at /tmp/gh-aw/cache-memory/smoke-test-20582611467.txt
⚠️ safeinputs-gh: Tool not available in this context

Overall Status: PASS (2/2 core tests)

📰 BREAKING: Report filed by Smoke Copilot Playwright fer issue #8111 🗺️

github-actions · 2025-12-29T21:06:00Z

PRs: Clarify shared workflow component errors and document 100% standalone compilation rate; Add testifylint to golangci-lint configuration.
Tests: GitHub MCP ✅; File write ✅; Playwright title ✅; Cache memory ✅; safeinputs-gh ❌ (tool unavailable).
Overall: FAIL

🔮 The oracle has spoken through Smoke Codex fer issue #8111 🗺️

Initial plan

813ab24

Copilot AI assigned Copilot and pelikhan Dec 29, 2025

Copilot started work on behalf of pelikhan December 29, 2025 18:08 View session

Copilot AI and others added 2 commits December 29, 2025 18:21

Copilot AI changed the title ~~[WIP] Add lockdown field computation in GitHub tool~~ Auto-detect GitHub MCP lockdown based on repository visibility Dec 29, 2025

Copilot AI requested a review from pelikhan December 29, 2025 18:32

Copilot finished work on behalf of pelikhan December 29, 2025 18:32

pelikhan added the smoke label Dec 29, 2025

github-actions Bot added the smoke-copilot label Dec 29, 2025

github-actions Bot added the smoke-copilot-no-firewall label Dec 29, 2025

Add changeset for auto-detect GitHub MCP lockdown [skip-ci]

698d2de

github-actions Bot added the smoke-codex-firewall label Dec 29, 2025

github-actions Bot added the smoke-claude label Dec 29, 2025

pelikhan marked this pull request as ready for review December 30, 2025 00:04

pelikhan merged commit 1eccf46 into main Dec 30, 2025
16 of 18 checks passed

pelikhan deleted the copilot/add-lockdown-step-for-github-tool branch December 30, 2025 00:05

Uh oh!

Conversation

Copilot AI commented Dec 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Example

Uh oh!

github-actions Bot commented Dec 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Dec 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Dec 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Dec 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Dec 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Dec 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Dec 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Dec 29, 2025 • edited by agentic-workflows-dev Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Dec 29, 2025

Smoke Test Results

Uh oh!

github-actions Bot commented Dec 29, 2025

Smoke Test Results (No Firewall)

Uh oh!

github-actions Bot commented Dec 29, 2025

Smoke Test Results (Run 20582611464)

Uh oh!

github-actions Bot commented Dec 29, 2025

Uh oh!

github-actions Bot commented Dec 29, 2025

Smoke Test Results - Claude Sonnet 4.5

Uh oh!

github-actions Bot commented Dec 29, 2025

Smoke Test Results

Uh oh!

github-actions Bot commented Dec 29, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Copilot AI commented Dec 29, 2025 •

edited

Loading

github-actions Bot commented Dec 29, 2025 •

edited

Loading

github-actions Bot commented Dec 29, 2025 •

edited

Loading

github-actions Bot commented Dec 29, 2025 •

edited

Loading

github-actions Bot commented Dec 29, 2025 •

edited

Loading

github-actions Bot commented Dec 29, 2025 •

edited

Loading

github-actions Bot commented Dec 29, 2025 •

edited

Loading

github-actions Bot commented Dec 29, 2025 •

edited

Loading

github-actions Bot commented Dec 29, 2025 •

edited by agentic-workflows-dev Bot

Loading