Add add-labels safe-output to Security Alert Burndown campaign workers

[Copilot]

Security Alert Burndown campaign worker workflows need the ability to label issues/PRs for campaign tracking and discovery.

Changes

• Added add-labels safe-output to all four campaign worker workflows:

  • code-scanning-fixer.md
  • security-fix-pr.md
  • dependabot-bundler.md
  • secret-scanning-triage.md

• Allowed labels: agentic-campaign, z_campaign_security-alert-burndown

Example

safe-outputs:
  add-labels:
    allowed:
      - agentic-campaign
      - z_campaign_security-alert-burndown
  create-pull-request:
    # ... existing config

Workflows can now label existing issues/PRs for campaign tracking, complementing the labels already applied during creation via create-pull-request and create-issue actions.

Original prompt

Ensure all Security Alert Burndown Campaigns worker workflows assign labels:
safe-outputs:
add-labels:
allowed:
- agentic-campaign
- z_campaign_security-alert-burndown

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.