Problem

The test-proxy.md workflow was incorrectly configured to manually handle GitHub comment creation, which is unnecessary when using the output: issue_comment: {} mechanism. This resulted in:

• Redundant create_comment tool permissions that weren't needed
• Manual permission configuration instead of leveraging automatic handling
• Missing inline PR number reference in reporting instructions

Solution

Updated the workflow to properly use the automatic comment creation mechanism:

Before:

permissions:
  issues: write # needed to write the output report to an issue

tools:
  github:
    allowed:
      - "create_comment"
      - "get_issue"

After:

output:
  issue_comment: {}

tools:
  github:
    allowed:
      - "get_issue"

Key Changes

1. Removed redundant create_comment tool: The output: issue_comment: {} mechanism automatically handles comment creation, making the manual tool unnecessary

2. Automatic permission handling: Replaced manual permissions: issues: write with the output mechanism that automatically provides appropriate issues: write and pull-requests: write permissions only to the comment job

3. Added inline PR number: Included ${{ github.event.pull_request.number }} in the reporting instructions for better context

4. Cleaner architecture: The main workflow job no longer needs write permissions, improving security by following the principle of least privilege

Benefits

• Simplified configuration: No need to manually configure GitHub API tools for commenting
• Better security: Main job runs with minimal permissions; only the auto-generated comment job gets write access
• Consistent behavior: Uses the same comment creation pattern as other workflows in the repository
• Enhanced context: PR number is now included in the reporting template

The compiled workflow now generates a properly isolated create_issue_comment job that runs conditionally when there's output to share.

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.