Add roles: read guidance for issue triage workflows in create-agentic-workflow

[Copilot]

The create-agentic-workflow agent now suggests roles: read when users build issue triage workflows, enabling non-team members to file issues that trigger the workflow.

Changes

Updated .github/aw/create-agentic-workflow.md with guidance in four locations:

• Interactive clarification section: Added bullet suggesting roles: read for issue triage responding to non-team member issues
• Design specification section: Added step explaining repository access roles (default [admin, maintainer, write] vs read for community access)
• Example workflow: Added roles: read with inline comment in YAML example
• Documentation note: Explained role setting enables community-facing issue triage

Example

---
description: Automated issue triage workflow
on:
  issues:
    types: [opened, edited]
roles: read  # Allow any authenticated user to trigger (important for issue triage)
permissions:
  contents: read
  issues: read
tools:
  github:
    toolsets: [default]
safe-outputs:
  add-comment:
    max: 1
---

The default roles: [admin, maintainer, write] restricts workflow triggers to team members only, which blocks community contributions in public repositories.

Original prompt

Update the create-agentic-workflow prompt to suggest setting roles: read if the user is building a "issue triage" so that non-team members can file issues.

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.