Add daily GitHub remote MCP authentication test workflow

[Copilot]

Implements daily automated testing of GitHub remote MCP server authentication with the GitHub Actions token. Validates the remote MCP can successfully access the GitHub API using workflow permissions.

Implementation

• Workflow: .github/workflows/github-remote-mcp-auth-test.md
  • Daily execution with fuzzy scheduling (11:46 UTC)
  • Tests authentication by listing 3 open issues via GitHub remote MCP
  • Uses mode: remote with minimal [repos, issues, discussions] toolsets
  • Requires issues: read and discussions: read permissions
  • Configured to use gpt-5-mini model for efficient testing

Failure Handling

• Creates discussion via safe-outputs.create-discussion on authentication failures
  • Posted in "audits" category
  • Prefix: [auth-test]
  • Automatically closes older discussions via close-older-discussions: true
• No discussion created on success (low noise)

Configuration

engine:
  id: copilot
  model: gpt-5-mini
tools:
  github:
    mode: remote
    toolsets: [repos, issues, discussions]
safe-outputs:
  create-discussion:
    title-prefix: "[auth-test] "
    category: "audits"
    max: 1
    close-older-discussions: true

Passes strict mode validation. Manual trigger available via workflow_dispatch.

Custom agent used: create-agentic-workflow
Design agentic workflows using GitHub Agentic Workflows (gh-aw) extension with interactive guidance on triggers, tools, and security best practices.

Custom agent used: create-agentic-workflow
Design agentic workflows using GitHub Agentic Workflows (gh-aw) extension with interactive guidance on triggers, tools, and security best practices.

Original prompt

Add a daily agentic workflow that tests that the GitHub remote MCP can be used with the GitHub actions token.

Set issues: read and try to list the list 3 open issue. If the MCP tool fails with authentication, create issue using safe output.

close older issues automatically.

Custom agent used: create-agentic-workflow
Design agentic workflows using GitHub Agentic Workflows (gh-aw) extension with interactive guidance on triggers, tools, and security best practices.

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[pelikhan]

@copilot merge main, use copilot gpt-5-mini

[Copilot]

@copilot merge main, use copilot gpt-5-mini

Done! Merged main and configured the workflow to use gpt-5-mini model in commit f6e5503.

Changes:

• Merged origin/main (includes docs updates)
• Added engine configuration with model: gpt-5-mini
• Recompiled workflow with new model settings
• Verified compilation passes strict mode validation

The workflow now uses the gpt-5-mini model for daily GitHub remote MCP authentication testing.

[pelikhan]

@copilot use create-discussion instead of create-issue

[Copilot]

@copilot use create-discussion instead of create-issue

Done! Changed to use create-discussion instead of create-issue in commit aab0c18.

Changes:

• Replaced create-issue with create-discussion in audits category
• Enabled close-older-discussions: true for automatic cleanup
• Updated permissions to include discussions: read
• Added discussions to GitHub MCP toolsets
• Updated all prompt references from issues to discussions

The workflow now creates discussions instead of issues for test failures, making results better organized in the audits category.