Skip to content

Add GitHub Agentic Workflows skills library (5 comprehensive skills)#1057

Merged
pethers merged 2 commits intomasterfrom
copilot/add-github-agentic-workflows-skills
Feb 11, 2026
Merged

Add GitHub Agentic Workflows skills library (5 comprehensive skills)#1057
pethers merged 2 commits intomasterfrom
copilot/add-github-agentic-workflows-skills

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Feb 11, 2026

Adds comprehensive skills coverage for GitHub Agentic Workflows based on 2026 features, security architecture, and production patterns.

Skills Added

Core & Security

  • github-agentic-workflows (450 lines) - Workflow structure, frontmatter, MCP tools, compilation, triggers. 8 examples covering basic to advanced patterns.
  • agentic-workflow-security (550 lines) - Defense-in-depth: safe-outputs pattern (writes without permissions), threat detection (prompt injection, secret leaks), network isolation, incident response.

Orchestration & Development

  • agentic-workflow-orchestration (520 lines) - 6 patterns: simple orchestrator-worker, hierarchical, pipeline, router, map-reduce, reflection. Circuit breakers and resilience.
  • agentic-workflow-development (600 lines) - gh-aw CLI workflow, watch mode iteration, testing/debugging, CI/CD integration.

Continuous AI

  • continuous-ai-patterns (800 lines) - 8 production patterns: doc sync, issue triage, quality reports, security review, stale cleanup, test analysis, dependency updates, health dashboards.

Key Patterns

Safe Outputs - Write operations without direct permissions:

---
permissions: read-all  # No write access
safe-outputs:
  create-pull-request:
    max: 1
  threat-detection:
    enabled: true
    action: block
---

Orchestration - Map-reduce for distributed work:

# MAP: Dispatch workers per repository
for repo in repos:
  dispatch security-scanner --repo=$repo

# REDUCE: Aggregate SARIF from all workers
aggregate findings → consolidated report

Continuous AI - Human-in-loop automation:

# Daily doc sync: analyze → update → PR (never auto-merge)
# Weekly quality: scan → report → create issues
# PR security: review → comment → escalate critical

Compliance

All skills include ISO 27001:2022, NIST CSF 2.0, CIS Controls v8.1 mappings and reference ISMS-PUBLIC policies.

Library Stats

  • Total skills: 48 (was 43)
  • Integration skills: 7 (was 2)
  • New content: ~18,000 lines
  • Examples: 35+ production-ready workflows

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>
@sonarqubecloud
Copy link
Copy Markdown

Copilot AI changed the title [WIP] Add skills for GitHub Agentic Workflows Add GitHub Agentic Workflows skills library (5 comprehensive skills) Feb 11, 2026
Copilot AI requested a review from pethers February 11, 2026 13:57
@pethers pethers marked this pull request as ready for review February 11, 2026 13:58
@pethers pethers merged commit 7293774 into master Feb 11, 2026
5 checks passed
@pethers pethers deleted the copilot/add-github-agentic-workflows-skills branch February 11, 2026 13:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants