github-agentic-workflowlisted

# GitHub Agentic Workflow Run Copilot in GitHub Actions for bounded investigation, triage, review, and documentation. Keep deterministic builds/tests/deployment in [github-actions](../github-actions/SKILL.md). ## Workflow 1. **Choose the job**: use reasoning only where context changes the work; resolve repository, candidate git revision, expected output, and existing authority. 1. **Inspect native support**: read `gh aw version` and the repository's generated dispatcher. Use [authoring.md](references/authoring.md) for setup, runtime identity, and lifecycle commands. 1. **Constrain the candidate**: begin with read permissions, narrow tools/network, explicit budgets, staged safe outputs, and the [Copilot starter](references/copilot-starter.md). 1. **Validate locally**: run `gh aw validate --strict` and `gh aw compile`; inspect source and lock output together before publication. 1. **Pilot when authorized**: preview dispatch, then run within Actions/Copilot spend authority; inspect output, audit traces and credits, and remove staging only after evidence supports it. ## Gotchas - **Two Copilot roles**: `gh aw init --engine copilot` configures Copilot as the authoring assistant; `engine: copilot` plus runtime authentication selects it inside the Actions workflow. - **Generated lock file**: Markdown body edits load at runtime, but frontmatter edits require recompilation; repository policy may still require compiling every change. - **Web search**: Copilot supports `web-fetch`,