Skip to content

Add copilot to bot-detection allowlist #15046

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
pelikhan merged 3 commits into from
Feb 12, 2026
Merged

Add copilot to bot-detection allowlist #15046

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
686d05f
Initial plan
Copilot Feb 12, 2026
bcafb5f
Initial analysis: bot-detection allowlist needs copilot addition
Copilot Feb 12, 2026
6a11117
Add copilot to bot-detection allowlist
Copilot Feb 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .github/workflows/ai-moderator.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

1 change: 1 addition & 0 deletions .github/workflows/auto-triage-issues.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion .github/workflows/bot-detection.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -194,7 +194,7 @@ Analyze the account for these 8 specific red flags:
3. For bots: Verify if it's a legitimate, known bot (dependabot, renovate, github-actions)
Copy link

Copilot AI Feb 12, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The “known bot” examples list in the detection steps still omits copilot, but the allowlist/threshold now includes it. Please update the parenthetical list to include copilot so the guidance is internally consistent (and matches the “Known Legitimate Bots” section later in the doc).

Suggested change
3. For bots: Verify if it's a legitimate, known bot (dependabot, renovate, github-actions)
3. For bots: Verify if it's a legitimate, known bot (dependabot, renovate, github-actions, copilot)

Copilot uses AI. Check for mistakes.

**Threshold**: Flag if:
- User type is "Bot" AND not in allowlist: [dependabot, renovate, github-actions]
- User type is "Bot" AND not in allowlist: [dependabot, renovate, github-actions, copilot]
- OR username ends with `[bot]` but isn't a known legitimate bot

## Analysis Process
Expand Down
1 change: 1 addition & 0 deletions .github/workflows/example-custom-error-patterns.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

1 change: 1 addition & 0 deletions .github/workflows/workflow-generator.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading