3
0
Fork 0
mirror of https://github.com/Z3Prover/z3 synced 2026-07-27 09:22:41 +00:00
z3/.github/workflows
Copilot d26b5245df
Fix api-coherence-checker agent job: switch to S2STOKENS authentication (#10223)
The `agent` job in the API Coherence Checker workflow was failing every
run with HTTP 401 because it depended on a `COPILOT_GITHUB_TOKEN`
repository secret that was missing/expired.

## Changes

- **`api-coherence-checker.lock.yml`**: Switch `agent` and `detection`
jobs from legacy `secrets.COPILOT_GITHUB_TOKEN` to the S2STOKENS
mechanism (service-to-service token exchange via the standard
`github.token`):

```yaml
# Before (agent and detection Execute Copilot CLI steps)
COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
# no S2STOKENS

# After
COPILOT_GITHUB_TOKEN: ${{ github.token }}
S2STOKENS: true
```

- **Permissions**: Replace broad `permissions: read-all` on the `agent`
job (and add to `detection`) with minimal explicit scopes required for
S2STOKENS:
```yaml
permissions:
  contents: read
  copilot-requests: write  # required for S2STOKENS token exchange
```

This brings `api-coherence-checker` in line with the pattern already
used by `code-simplifier` and `release-notes-updater`.

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
2026-07-24 20:02:23 -07:00
..
shared Upgrade agentic workflows to gh-aw v0.36.0 (#8122) 2026-01-08 11:50:35 -08:00
a3-python.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
a3-python.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
academic-citation-tracker.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
academic-citation-tracker.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
agentics-maintenance.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
android-build.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
api-coherence-checker.lock.yml Fix api-coherence-checker agent job: switch to S2STOKENS authentication (#10223) 2026-07-24 20:02:23 -07:00
api-coherence-checker.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
build-warning-fixer.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
build-warning-fixer.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
build-z3-cache.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
ci.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
code-conventions-analyzer.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
code-conventions-analyzer.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
code-simplifier.lock.yml Fix Code Simplifier agent authentication in GitHub Actions (#10222) 2026-07-24 19:29:54 -07:00
code-simplifier.md Fix Code Simplifier agent authentication in GitHub Actions (#10222) 2026-07-24 19:29:54 -07:00
compare-stats-anomaly-reporter.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
compare-stats-anomaly-reporter.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
copilot-setup-steps.yml update aw to current version 2026-01-08 18:15:03 +00:00
coverage.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
cross-build.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
csa-analysis.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
csa-analysis.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
docs.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
fstar-master-build.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
issue-backlog-processor.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
issue-backlog-processor.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
mark-prs-ready-for-review.yml Bump actions/github-script from 8.0.0 to 9.0.0 (#9296) 2026-04-19 16:49:03 +02:00
memory-safety-report.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
memory-safety-report.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
memory-safety.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
msvc-static-build-clang-cl.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
msvc-static-build.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
nightly-validation.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
nightly.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
ocaml.yaml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
ostrich-benchmark.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
ostrich-benchmark.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
pyodide-pypi.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
qf-s-benchmark.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
qf-s-benchmark.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
release-notes-updater.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
release-notes-updater.md Fix release-notes-updater: add copilot-requests: write permission (#10116) 2026-07-13 17:13:31 -07:00
release.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
smtlib-benchmark-finder.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
smtlib-benchmark-finder.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
specbot-crash-analyzer.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
specbot-crash-analyzer.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
tactic-to-simplifier.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
tactic-to-simplifier.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
tptp-benchmark.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
tptp-benchmark.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
wasm-release.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
wasm.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
Windows.yml ci: add MinGW build/test job to Windows.yml (#10211) 2026-07-24 13:11:08 -07:00
wip.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
workflow-suggestion-agent.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
workflow-suggestion-agent.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00
zipt-code-reviewer.lock.yml Bump actions/checkout from 7.0.0 to 7.0.1 (#10208) 2026-07-23 19:17:49 -07:00
zipt-code-reviewer.md Suppress auto-created failure issues for agentic workflows (#9834) 2026-06-11 20:57:43 -07:00