Remove CLAUDE_CODE_OAUTH_TOKEN support by Copilot · Pull Request #16757 · github/gh-aw

Copilot · 2026-02-19T05:02:54Z

Removes all support for CLAUDE_CODE_OAUTH_TOKEN. Claude engine now requires only ANTHROPIC_API_KEY.

Breaking change: No backward compatibility. Workflows using CLAUDE_CODE_OAUTH_TOKEN must migrate to ANTHROPIC_API_KEY.

Changes

pkg/workflow/claude_engine.go: Removed CLAUDE_CODE_OAUTH_TOKEN from required secrets, installation validation, and execution environment
pkg/constants/constants.go: Removed from AlternativeSecrets for Claude engine option
Tests: Updated all test expectations and removed pkg/cli/workflows/test-claude-oauth-workflow.md
Workflows: Recompiled 37 lock files to remove token references

Before/After

// Before
secrets := []string{"ANTHROPIC_API_KEY", "CLAUDE_CODE_OAUTH_TOKEN"}

// After
secrets := []string{"ANTHROPIC_API_KEY"}

# Before
env:
  ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
  CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}

# After  
env:
  ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw _value"]."\n"; (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw "$k=".$v["local-C (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/11bd71901bbe5b1630ceea73d27597364c9af683
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/11bd71901bbe5b1630ceea73d27597364c9af683 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/11bd71901bbe5b1630ceea73d27597364c9af683 --jq .object.sha --show-toplevel go $name) { hasDiscussionsEnabled } } '**/*.ts' '**/*.git GO111MODULE 64/bin/go git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE ache/go/1.25.0/xxterm-color git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha g_.a -s -w -X main.version=e343f34-dirty x_amd64/link gh-aw ./cmd/gh-aw (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha -json GO111MODULE piler}} GOINSECURE GOMOD GOMODCACHE go env 2975755004 GO111MODULE tnet/tools/sh GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha auto-triage-issues.md config /usr/bin/infocmp remote.origin.urgit (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha bot-detection.md rev-parse 0/x64/bin/node (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha --show-toplevel resolved$ /usr/bin/git se 1971624/b101/vetrev-parse ache/go/1.25.0/x--show-toplevel git rev-�� --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git origin REDACTED /opt/hostedtoolc--show-toplevel git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha 2984762473/.gith-p /sys/fs/cgroup x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha r-test3233262787/test1.md r-test3233262787/test2.lock.yml ipts.test (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha HEAD .github/workflows/test.md /usr/bin/git git status --porgit (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha k/_temp/copilot-developer-action-errorsas (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha --show-toplevel go /usr/bin/git '**/*.ts' '**/*.git GO111MODULE 8d519d9/node_mod/home/REDACTED/work/gh-aw/gh-aw/.github/workflows git rev-�� --show-toplevel go inPathSetup_GorootOrdering1060483855/001/go/1.25.0/x64/bin/go -json GO111MODULE ache/go/1.25.0/xgraphql git (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v7
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v7 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v7 --jq .object.sha d -n 10 (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v7 --jq .object.sha ew@v1.1.1/spew/bremote.origin.url ew@v1.1.1/spew/common.go 64/pkg/tool/linux_amd64/compile (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha rd .cfg 64/pkg/tool/linu-f credential.helpegit (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha --local user.email ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha and.go and_test.go 64/pkg/tool/linux_amd64/vet ription_test.go ttributes_test.g-c gration_test.go WdoVr4iAs4gc (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/4dc6199c7b1a012772edbd06daecab0f50c9053c
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/4dc6199c7b1a012772edbd06daecab0f50c9053c --jq .object.sha fflib@v1.0.0/difflib/difflib.go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/4dc6199c7b1a012772edbd06daecab0f50c9053c --jq .object.sha --show-toplevel go /usr/bin/git .js' --ignore-pagit GO111MODULE ache/go/1.25.0/x/home/REDACTED/work/gh-aw/gh-aw/.github/workflows git rev-�� nner/work/gh-aw/gh-aw/actions/setup/sh/sanitize_path.sh' ':::' && echo "$PATH" go /usr/bin/git -json GO111MODULE 0/x64/bin/node git (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha g_.a config Name,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle remote.origin.urgit es $name) { has--show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet ortc�� Co7lHavXW stmain.go /usr/bin/git ify@v1.11.1/assegit (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha ck 'scripts/**/*.js' --ignore-path .prettierignore GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v5 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v5 --jq .object.sha --show-toplevel go /usr/bin/git -json GO111MODULE ache/go/1.25.0/x--tags git rev-�� 450e6846..HEAD go /usr/bin/infocmp '**/*.ts' '**/*.git GO111MODULE 64/bin/go infocmp (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v5 --jq .object.sha --show-toplevel go /usr/bin/git -json GO111MODULE ache/go/1.25.0/xlog.showsignature=false git rev-�� --show-toplevel go /usr/bin/git '**/*.ts' '**/*.git GO111MODULE ache/go/1.25.0/x/home/REDACTED/work/gh-aw/gh-aw/.github/workflows git (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v6 --jq .object.sha -c=4 -nolocalimports -importcfg /tmp/go-build3411833032/b123/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/constants/constants.go /home/REDACTED/work/gh-aw/gh-aw/pkg/constants/constants_test.go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v6 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v6 --jq .object.sha --git-dir go 64/bin/node de6f8b085f83e759git GO111MODULE x_amd64/compile git 0/x6�� --show-toplevel x_amd64/compile /usr/bin/git md GO111MODULE 64/bin/go git (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha blog-auditor.md x_amd64/vet /usr/bin/infocmp (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha ck 'scripts/**/*.js' --ignore-path .prettierignore GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha -c=4 -nolocalimports -importcfg /tmp/go-build2990175368/b001/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/cmd/gh-aw/main.go x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha est" go 64/bin/node 86fe24fbabb5ae66git GO111MODULE x_amd64/compile git 0/x6�� --show-toplevel x_amd64/compile /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
https://api.github.com/repos/anchore/sbom-action/git/ref/tags/v0
- Triggering command: /usr/bin/gh gh api /repos/anchore/sbom-action/git/ref/tags/v0 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/anchore/sbom-action/git/ref/tags/v0 --jq .object.sha --show-toplevel go $name) { hasDiscussionsEnabled } } .js' --ignore-pa/usr/bin/gh GO111MODULE ache/go/1.25.0/xgraphql git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE ache/go/1.25.0/x/home/REDACTED/work/gh-aw/gh-aw/.github/workflows git (http block)
- Triggering command: /usr/bin/gh gh api /repos/anchore/sbom-action/git/ref/tags/v0 --jq .object.sha etup-go/git/ref/remote.origin.url go /usr/bin/git .js' --ignore-pagit GO111MODULE ache/go/1.25.0/x/home/REDACTED/work/gh-aw/gh-aw/.github/workflows git rev-�� nner/work/gh-aw/gh-aw/actions/setup/sh/sanitize_path.sh' ':::/usr/bin:/usr/local/bin' && echo "$git go /usr/bin/git -json GO111MODULE ache/go/1.25.0/xxterm-color git (http block)
https://api.github.com/repos/docker/build-push-action/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v6 --jq .object.sha ./cmd/gh-aw (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v6 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v6 --jq .object.sha /gh-aw go $name) { hasDiscussionsEnabled } } .js' --ignore-pagit GO111MODULE ache/go/1.25.0/x/home/REDACTED/work/gh-aw/gh-aw/.github/workflows git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE ache/go/1.25.0/xxterm-color git (http block)
https://api.github.com/repos/docker/login-action/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq .object.sha assword=$GITHUB_TOKEN"; }; f store assword=$GITHUB_TOKEN"; }; f store 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq .object.sha heckout/git/ref/tags/v4 go /usr/bin/git .js' --ignore-pagit GO111MODULE ache/go/1.25.0/x/home/REDACTED/work/gh-aw/gh-aw/.github/workflows git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE ache/go/1.25.0/xxterm-color git (http block)
https://api.github.com/repos/docker/metadata-action/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v5 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v5 --jq .object.sha llector.slice (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v5 --jq .object.sha etup-node/git/reremote.origin.url go /usr/bin/git .js' --ignore-pa/usr/bin/gh GO111MODULE ache/go/1.25.0/xgraphql git rev-�� nner/work/gh-aw/-f go /usr/bin/git -json GO111MODULE ache/go/1.25.0/x/home/REDACTED/work/gh-aw/gh-aw/.github/workflows git (http block)
https://api.github.com/repos/docker/setup-buildx-action/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v3 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v3 --jq .object.sha --show-toplevel go /usr/bin/git .js' --ignore-pa/usr/bin/gh GO111MODULE ache/go/1.25.0/xgraphql git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE ache/go/1.25.0/x/home/REDACTED/work/gh-aw/gh-aw/.github/workflows git (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v3 --jq .object.sha --show-toplevel go /usr/bin/git .js' --ignore-pa/usr/bin/gh GO111MODULE ache/go/1.25.0/xgraphql git rev-�� nner/work/gh-aw/-f go /usr/bin/git -json GO111MODULE bin/node git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 /tmp/go-build2761971624/b175/vetmain x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 -buildtags /opt/hostedtoolcache/go/1.25.0/x-lang=go1.23 -errorsas -ifaceassert -nilfunc /opt/hostedtoolcache/go/1.25.0/x-goversion -ato�� ithub/workflows -buildtags /home/REDACTED/.config/composer/ve-importcfg -errorsas -ifaceassert ed } } bash (http block)
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 -buildtags /opt/hostedtoolcache/go/1.25.0/x-lang=go1.25 -errorsas -ifaceassert -nilfunc /opt/hostedtoolcache/go/1.25.0/xconfig -ato�� ithub/workflows -buildtags /home/REDACTED/.cargo/bin/bash l -ifaceassert -nilfunc bash (http block)
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 /tmp/go-build2761971624/b170/vet-ifaceassert /opt/hostedtoolcache/go/1.25.0/x-nilfunc (http block)
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 GO111MODULE x_amd64/cgo GOINSECURE GOMOD GOMODCACHE x_amd64/cgo env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 /tmp/go-build2761971624/b171/vetmain (http block)
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 -buildtags x_amd64/link -errorsas -ifaceassert -nilfunc x_amd64/link -ato�� k/gh-aw/gh-aw/.github/workflows -buildtags /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -errorsas -ifaceassert ed } } L1/BH39Jih_oyS2LvJ_3yZB/SkE-TZwGremote.origin.url (http block)
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE x_amd64/asm GOINSECURE GOMOD GOMODCACHE x_amd64/asm env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 /tmp/go-build2761971624/b167/vet.cfg x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path laude-code-oauthremote.origin.url .cfg kflow.test credential.userngit (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 b/gh-aw/pkg/pars--norc (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 -ifaceassert -nilfunc x_amd64/vet -ato�� ithub/workflows -buildtags /usr/bin/php8.3 -errorsas -ifaceassert -nilfunc /usr/bin/php8.3 (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/c4e091835c7a94dc7d3acb8ed3ae145afb4995f3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/c4e091835c7a94dc7d3acb8ed3ae145afb4995f3 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/c4e091835c7a94dc7d3acb8ed3ae145afb4995f3 --jq .object.sha --show-toplevel x_amd64/asm /usr/bin/git -json GO111MODULE 64/bin/go git rev-�� --show-toplevel go /usr/bin/git p/TestGetNpmBinP/usr/bin/gh GO111MODULE ode git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha s "-s -w -X main.version=e343f34-p -buildtags me: String!) { repository(owne-lang=go1.25 -errorsas -ifaceassert -nilfunc sort -rn ithub/workflows -k2,2 /opt/hostedtoolcache/go/1.25.0/x-lang=go1.25 l (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/githubnext/agentics/git/ref/tags/-
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/- --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/- --jq .object.sha --show-toplevel go $name) { hasDiscussionsEnabled } } -json GO111MODULE ache/go/1.25.0/x64/bin/go git rev-�� --show-toplevel go /usr/bin/git 6e154f29590f2c4d/usr/bin/gh GO111MODULE 64/pkg/tool/linugraphql git (http block)
https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha -unreachable=false /tmp/go-build2761971624/b115/vet.cfg me: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } (http block)
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha -json GO111MODULE At,event,headBranch,headSha,displayTitle GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion (http block)
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo .cfg user.name (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo tnet/tools/bash user.name (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go ath /dev/null GO111MODULE 64/bin/go sh -c npx prettier --wGOSUMDB go 64/bin/go tierignore -authored-by: pe-c 64/bin/go go (http block)
https://api.github.com/repos/owner/repo/contents/file.md
- Triggering command: /tmp/go-build2431846202/b368/cli.test /tmp/go-build2431846202/b368/cli.test -test.testlogfile=/tmp/go-build2431846202/b368/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true http.https://gitinfocmp (http block)
- Triggering command: /tmp/go-build1769872958/b368/cli.test /tmp/go-build1769872958/b368/cli.test -test.testlogfile=/tmp/go-build1769872958/b368/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true /dev/null -trimpath 64/bin/go sh -c "prettier" --wriGOINSECURE go 64/bin/go "; \ else \ echo "�� Warning: .github/aw/actions-lock.json does not exist yet"; \ fi GO111MODULE run-script/lib/n--check node (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name laude-code-oauthremote.origin.url .cfg sh credential.userngit (http block)
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name ck '**/*.cjs' '*GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name npx prettier --wGOINSECURE go 64/bin/go ath /dev/null GO111MODULE 64/bin/go node /opt�� run format:pkg-json 64/bin/go tierignore GO111MODULE x_amd64/vet go (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Remove support for CLAUDE_CODE_OAUTH_TOKEN support, all code and documentation. No backward compatibility .

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot

Pull request overview

Removes all support for CLAUDE_CODE_OAUTH_TOKEN and standardizes Claude engine authentication on ANTHROPIC_API_KEY only (breaking change, no compatibility path).

Changes:

Updated Claude engine secret requirements, installation validation, and execution environment to require only ANTHROPIC_API_KEY.
Removed CLAUDE_CODE_OAUTH_TOKEN from engine option “alternative secrets” and updated relevant unit tests.
Recompiled workflow lockfiles and WASM golden fixtures to remove all references to CLAUDE_CODE_OAUTH_TOKEN (including secret redaction lists), and removed the OAuth-focused test workflow markdown.

Reviewed changes

Copilot reviewed 48 out of 48 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
pkg/workflow/claude_engine.go	Drops `CLAUDE_CODE_OAUTH_TOKEN` from required secrets, install validation inputs, and execution env.
pkg/constants/constants.go	Removes Claude engine “alternative secret” (`CLAUDE_CODE_OAUTH_TOKEN`).
pkg/constants/constants_test.go	Updates expectations for engine secret enumeration (no Claude alternative secret).
pkg/workflow/secret_validation_test.go	Updates validation-step tests to expect only `ANTHROPIC_API_KEY` for Claude.
pkg/workflow/engine_helpers_secrets_test.go	Updates Claude required-secret tests to only require `ANTHROPIC_API_KEY` (and MCP key when applicable).
pkg/workflow/claude_engine_test.go	Updates Claude engine step/env expectations to remove OAuth token.
pkg/cli/engine_secrets_test.go	Updates CLI secret-resolution expectations (Claude has no alternative env vars).
pkg/cli/workflows/test-claude-oauth-workflow.md	Removes the Claude OAuth token test workflow doc.
pkg/workflow/testdata/wasm_golden/TestWasmGolden_CompileFixtures/smoke-claude.golden	Golden output updated to remove OAuth token secret wiring and redaction entries.
pkg/workflow/testdata/wasm_golden/TestWasmGolden_CompileFixtures/claude-with-network.golden	Golden output updated to remove OAuth token secret wiring and redaction entries.
pkg/workflow/testdata/wasm_golden/TestWasmGolden_CompileFixtures/basic-claude.golden	Golden output updated to remove OAuth token secret wiring and redaction entries.
.github/workflows/unbloat-docs.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/typist.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/test-create-pr-error-handling.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/step-name-alignment.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/static-analysis-report.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/smoke-claude.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/sergo.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/semantic-function-refactor.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/scout.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/schema-consistency-checker.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/safe-output-health.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/prompt-clustering-analysis.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/lockfile-stats.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/instructions-janitor.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/go-pattern-detector.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/go-logger.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/go-fan.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/github-mcp-tools-report.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/github-mcp-structural-analysis.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/example-workflow-analyzer.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/developer-docs-consolidator.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/daily-team-evolution-insights.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/daily-security-red-team.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/daily-safe-outputs-conformance.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/daily-safe-output-optimizer.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/daily-multi-device-docs-tester.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/daily-doc-updater.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/daily-code-metrics.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/daily-choice-test.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/copilot-session-insights.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/copilot-agent-analysis.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/commit-changes-analyzer.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/cloclo.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/cli-version-checker.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/claude-code-user-docs-review.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/blog-auditor.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.
.github/workflows/audit-workflows.lock.yml	Compiled workflow updated to remove OAuth token secret usage and redaction entries.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

strawgate · 2026-02-19T05:26:41Z

Is there an issue or discussion which tracks why this is getting removed? Was very much looking forward to leveraging this

Initial plan

e343f34

Copilot AI assigned Copilot and pelikhan Feb 19, 2026

Copilot started work on behalf of pelikhan February 19, 2026 05:02 View session

Copilot AI and others added 3 commits February 19, 2026 05:10

Remove CLAUDE_CODE_OAUTH_TOKEN support from code and tests

a2e2267

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Fix remaining test for secret validation

a0155ba

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Regenerate golden test files without CLAUDE_CODE_OAUTH_TOKEN

39d86f0

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Remove support for CLAUDE_CODE_OAUTH_TOKEN and documentation~~ Remove CLAUDE_CODE_OAUTH_TOKEN support Feb 19, 2026

Copilot finished work on behalf of pelikhan February 19, 2026 05:21

pelikhan marked this pull request as ready for review February 19, 2026 05:21

Copilot AI review requested due to automatic review settings February 19, 2026 05:21

Copilot started reviewing on behalf of pelikhan February 19, 2026 05:22 View session

Copilot AI reviewed Feb 19, 2026

View reviewed changes

pelikhan merged commit f0c707e into main Feb 19, 2026
164 checks passed

pelikhan deleted the copilot/remove-claude-code-oauth-token-again branch February 19, 2026 05:28

github-actions bot mentioned this pull request Feb 19, 2026

[Daily Report] Daily Status Report — 2026-02-19 #16787

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

Remove CLAUDE_CODE_OAUTH_TOKEN support#16757

Remove CLAUDE_CODE_OAUTH_TOKEN support#16757
pelikhan merged 4 commits intomainfrom
copilot/remove-claude-code-oauth-token-again

Copilot AI commented Feb 19, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

strawgate commented Feb 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Comments

Conversation

Copilot AI commented Feb 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Before/After

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

strawgate commented Feb 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Feb 19, 2026 •

edited

Loading