GitHub Copilot CLI Now Runs in GitHub Actions via Built-In GITHUB_TOKEN, Eliminating Long-Lived PATs

What's new

• GITHUB_TOKEN auth in Actions: Copilot CLI authenticates via the built-in token instead of a long-lived PAT
• Eliminated security risk: No long-lived, high-privilege secrets in CI/CD pipelines
• Automation at scale: Enterprise teams can integrate AI code assistance directly into automated workflows without manual key management

Why it matters

Previously, teams had to create and rotate PAT tokens with Copilot permissions for automations. The built-in token eliminates operational overhead and improves security posture—important for enterprise deployments in customer pipelines.

How to try it

In a GitHub Actions workflow, use the GITHUB_TOKEN environment variable as the auth credential for Copilot CLI commands; available to all GitHub Copilot subscribers.