Method addCustomActionGitHubToken

pkg/workflow/safe_outputs_steps.go:72–100

addCustomActionGitHubToken adds a GitHub token as action input. The token precedence depends on the tokenType flags: - UseCopilotCodingAgentToken: customToken > SafeOutputs.GitHubToken > GH_AW_AGENT_TOKEN || GH_AW_GITHUB_TOKEN || GITHUB_TOKEN - UseCopilotRequestsToken: customToken > SafeOutputs.GitH

(steps *[]string, data *WorkflowData, config GitHubScriptStepConfig)

// - UseCopilotRequestsToken: customToken > SafeOutputs.GitHubToken > COPILOT_GITHUB_TOKEN
// - Default: customToken > SafeOutputs.GitHubToken > GH_AW_GITHUB_TOKEN || GITHUB_TOKEN
func (c *Compiler) addCustomActionGitHubToken(steps *[]string, data *WorkflowData, config GitHubScriptStepConfig) {
	safeOutputsStepsLog.Printf("Selecting GitHub token for step: %s (copilotCodingAgent=%t, copilotRequests=%t)", config.StepName, config.UseCopilotCodingAgentToken, config.UseCopilotRequestsToken)
	var token string

	// Get safe-outputs level token
	var safeOutputsToken string
	if data.SafeOutputs != nil {
		safeOutputsToken = data.SafeOutputs.GitHubToken
	}

	// Choose the first non-empty custom token for precedence
	effectiveCustomToken := config.CustomToken
	if effectiveCustomToken == "" {
		effectiveCustomToken = safeOutputsToken
	}

	// Agent token mode: use full precedence chain for agent assignment
	if config.UseCopilotCodingAgentToken {
		token = getEffectiveCopilotCodingAgentGitHubToken(effectiveCustomToken)
	} else if config.UseCopilotRequestsToken {
		// Copilot mode: use getEffectiveCopilotRequestsToken with safe-outputs token precedence
		token = getEffectiveCopilotRequestsToken(effectiveCustomToken)
	} else {
		// Standard mode: use safe output token chain
		token = getEffectiveSafeOutputGitHubToken(effectiveCustomToken)
	}

	*steps = append(*steps, fmt.Sprintf("          token: %s\n", token))
}

// GitHubScriptStepConfig holds configuration for building a GitHub Script step
type GitHubScriptStepConfig struct {