Add GitHub lockdown mode to workflows processing non-collaborator content#14840
Merged
Add GitHub lockdown mode to workflows processing non-collaborator content#14840
Conversation
Copilot stopped work on behalf of
pelikhan due to an error
February 10, 2026 21:43
Copilot stopped work on behalf of
pelikhan due to an error
February 10, 2026 21:43
Set tools.github.lockdown: true for workflows that could work on non-collaborator generated items (issues, PRs, discussions) from public repositories. This ensures these workflows only process content from users with push access. Workflows updated: - issue-monster.md - discussion-task-miner.md - workflow-generator.md - auto-triage-issues.md - issue-triage-agent.md - pr-triage-agent.md - ai-moderator.md - issue-arborist.md - weekly-issue-summary.md - daily-issues-report.md - grumpy-reviewer.md - plan.md Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot
AI
changed the title
[WIP] Set tools.github.lockdown to true for specific workflows
Add GitHub lockdown mode to workflows processing non-collaborator content
Feb 10, 2026
pelikhan
reviewed
Feb 10, 2026
Per review feedback, removed lockdown: true from: - ai-moderator.md - uses automatic lockdown detection - auto-triage-issues.md - uses automatic lockdown detection These workflows now use $GITHUB_MCP_LOCKDOWN for dynamic lockdown based on repository visibility rather than forced lockdown. Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
Pull request overview
This PR enables GitHub “lockdown mode” for several workflows that process issues/PRs/discussions, ensuring the GitHub MCP server only returns content authored by users with push access.
Changes:
- Added
tools.github.lockdown: trueto selected workflow frontmatter files. - Updated corresponding
*.lock.ymlfiles to hardcodeGITHUB_LOCKDOWN_MODE: "1"and remove the “determine automatic lockdown” step/env wiring.
Reviewed changes
Copilot reviewed 20 out of 20 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/workflow-generator.md | Enables explicit lockdown for the workflow generator. |
| .github/workflows/workflow-generator.lock.yml | Regenerates lockfile to hardcode lockdown mode and remove auto-detection step. |
| .github/workflows/weekly-issue-summary.md | Enables explicit lockdown for weekly issue summary workflow. |
| .github/workflows/weekly-issue-summary.lock.yml | Regenerates lockfile to hardcode lockdown mode and remove auto-detection step. |
| .github/workflows/pr-triage-agent.md | Enables explicit lockdown for PR triage agent. |
| .github/workflows/pr-triage-agent.lock.yml | Regenerates lockfile to hardcode lockdown mode and remove auto-detection step. |
| .github/workflows/plan.md | Enables explicit lockdown for /plan slash-command workflow. |
| .github/workflows/plan.lock.yml | Regenerates lockfile to hardcode lockdown mode and remove auto-detection step. |
| .github/workflows/issue-triage-agent.md | Enables explicit lockdown for issue triage agent. |
| .github/workflows/issue-triage-agent.lock.yml | Regenerates lockfile to hardcode lockdown mode and remove auto-detection step. |
| .github/workflows/issue-monster.md | Enables explicit lockdown for issue-monster orchestration workflow. |
| .github/workflows/issue-monster.lock.yml | Regenerates lockfile to hardcode lockdown mode and remove auto-detection step. |
| .github/workflows/issue-arborist.md | Enables explicit lockdown for issue arborist workflow. |
| .github/workflows/issue-arborist.lock.yml | Regenerates lockfile to hardcode lockdown mode and remove auto-detection step; updates MCP env lists accordingly. |
| .github/workflows/grumpy-reviewer.md | Enables explicit lockdown for grumpy reviewer slash-command workflow. |
| .github/workflows/grumpy-reviewer.lock.yml | Regenerates lockfile to hardcode lockdown mode and remove auto-detection step. |
| .github/workflows/discussion-task-miner.md | Enables explicit lockdown for discussion task miner. |
| .github/workflows/discussion-task-miner.lock.yml | Regenerates lockfile to hardcode lockdown mode and remove auto-detection step. |
| .github/workflows/daily-issues-report.md | Enables explicit lockdown for daily issues report workflow. |
| .github/workflows/daily-issues-report.lock.yml | Regenerates lockfile to hardcode lockdown mode and remove auto-detection step; updates MCP env lists accordingly. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Enables lockdown mode for workflows that process issues, PRs, and discussions from public repository contributors. This filters content to only items authored by users with push access.
Changes
Core workflows (explicit lockdown):
issue-monster.md- Issue assignment orchestratordiscussion-task-miner.md- Discussion content analyzerworkflow-generator.md- Workflow creation from issue formsTriage and moderation (explicit lockdown):
issue-triage-agent.md,pr-triage-agent.mdissue-arborist.md,weekly-issue-summary.md,daily-issues-report.mdSlash commands (explicit lockdown):
grumpy-reviewer.md(PR reviews)plan.md(issue/discussion planning)Workflows using automatic lockdown detection:
auto-triage-issues.md- Uses$GITHUB_MCP_LOCKDOWNfor dynamic lockdown based on repository visibilityai-moderator.md- Uses$GITHUB_MCP_LOCKDOWNfor dynamic lockdown based on repository visibilityImplementation
Explicit lockdown:
Compiles to
GITHUB_LOCKDOWN_MODE: "1"in workflow lock files.Automatic lockdown detection:
Compiles to
GITHUB_LOCKDOWN_MODE: "$GITHUB_MCP_LOCKDOWN"in workflow lock files, automatically enabling lockdown for public repositories whenGH_AW_GITHUB_MCP_SERVER_TOKENis set.💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.