Authorize allowlisted GitHub App actors on repository_dispatch by Copilot · Pull Request #63492 · github/gh-aw

Copilot · 2026-09-25T19:18:49Z

on.roles: is matched against repository collaborator roles, and GitHub App identities are never collaborators — so an App-sent repository_dispatch always resolved to permission none and the run was skipped at pre-activation. The documented escape hatch, on.bots:, was broken for the same reason: checkBotStatus verifies installation through the same collaborator API and reported the App as "not active/installed".

Changes

actions/setup/js/check_membership.cjs: checkBotAllowlistAuthorization takes an installationCheckOptional option, set by main() only for repository_dispatch. An allowlisted actor whose collaborator lookup conclusively reports "not a collaborator" is authorized, since posting a repository_dispatch already requires contents: write on the repository.
Guardrails: only actors explicitly listed in on.bots: are admitted — everyone else still goes through the normal on.roles: gate; transient lookup failures (5xx, rate limiting) set error and still deny; all other events are unchanged and still require the bot to be installed.
Tests: allowlisted App admitted on repository_dispatch, non-allowlisted App still denied, other events still require installation, transient failure still denies.
Docs (reference/triggers.md): the repository_dispatch and on.bots: sections now state that App senders are admitted via on.bots: rather than on.roles:.

Working configuration for an App→App chain:

on:
  repository_dispatch:
    types: [agent-handoff]
  bots: ["my-app"]   # [bot] suffix optional

Deliberately not implemented: blanket exemption of all repository_dispatch senders, which would silently downgrade a workflow declaring roles: [admin] to "anyone with write access".

Unrelated to the code change, two claims in the issue do not reproduce on main: on.roles: does change the compiled GH_AW_REQUIRED_ROLES (a top-level roles: key is rejected with a schema error pointing at on.roles), and there is no none/any value — all is the documented "no restrictions" setting.

Fixes Role gate rejects GitHub App (bot) actors on repository_dispatch #63066

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 30.8 AIC · ⌖ 8.67 AIC · ⊞ 9.6K · ◷
_{Comment /souschef to run again}

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot

Copilot review overview

🟡 Changes recommended

The new error guard can fail open for an empty error message, and the documentation inaccurately describes some authorization paths.

Get a fresh assessment by requesting another Copilot review.

Review effort: Balanced
Findings: 1 · 2

Open (3)

Check lookup errors by presence, not error-message truthiness · New
Qualify the on.bots requirement for on.roles: all · New
Clarify installation lookup is always required and fail-closed · New

What changed in this PR

Enables allowlisted GitHub Apps to trigger repository_dispatch workflows while retaining existing authorization behavior elsewhere.

Changes:

Relaxes App installation verification for allowlisted repository dispatches.
Adds authorization and failure-path tests.
Documents the behavior and adds a patch changeset.

File	Description
`actions/setup/js/check_membership.cjs`	Implements conditional App authorization.
`actions/setup/js/check_membership.test.cjs`	Tests dispatch authorization guardrails.
`docs/src/content/docs/reference/triggers.md`	Documents App-triggered dispatches.
`.changeset/repository-dispatch-app-bots.md`	Records the patch release change.

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

Copilot · 2026-09-25T20:10:47Z


 Omit `types:` to fire on any `event_type`.

+The dispatch sender still goes through the [role check](#filtering-by-repository-access-roles-onroles-onskip-roles). A PAT-based sender is checked against `on.roles:`; a GitHub App sender is never a repository collaborator and must be allowlisted with [`on.bots:`](#filtering-by-bot-onbots-onskip-bots).


Qualified in d9fc499 — the sentence now reads "Unless on.roles: all is set (which disables the check entirely), the dispatch sender goes through the role check."

Copilot · 2026-09-25T20:10:52Z


 The `[bot]` suffix is optional — `github-actions` matches `github-actions[bot]` automatically.

+Allowlisted bots must be installed on the repository, which is verified through the repository collaborator API. GitHub App identities are not collaborators, so that lookup finds nothing for them. On `repository_dispatch` the check is therefore relaxed: an allowlisted App is authorized without the installation lookup, because sending the event already requires `contents: write` access to the repository. This is how an App-triggered `repository_dispatch` is admitted — `on.roles:` is matched against repository collaborator roles and never matches an App sender.


Reworded in d9fc499 to describe the actual fail-closed behavior: the lookup is still performed, authorization happens only on a conclusive "not a collaborator" result, and a failed lookup (outage/rate limit) is still denied.

gh-aw-bot · 2026-09-25T20:03:08Z

@copilot Please review the current head, address any remaining maintainer feedback, refresh the branch if needed, and continue with the pr-finisher skill.

A branch refresh was requested from sous-chef for this run: https://github.com/github/gh-aw/actions/runs/36182619999

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 30.8 AIC · ⌖ 8.67 AIC · ⊞ 9.6K · ◷
_{Comment /souschef to run again}

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

pelikhan · 2026-09-25T20:54:49Z

@copilot update safe output specs and specs tests.

gh-aw-bot · 2026-09-25T21:03:03Z

@copilot Please review the current head, address any remaining maintainer feedback, refresh the branch if needed, and continue with the pr-finisher skill.

Generated by 👨🍳 PR Sous Chef

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 25.1 AIC · ⌖ 8.84 AIC · ⊞ 9.3K · ◷
_{Comment /souschef to run again}

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-09-25T21:12:06Z

@copilot update safe output specs and specs tests.

Updated the threat-detection specification, compliance crosswalk, changelog, and formal specification coverage for the repository_dispatch App authorization rule in fccae12.

…-issues Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot · 2026-09-25T21:31:16Z

@copilot Please review the current head, address any remaining maintainer feedback, refresh the branch if needed, and continue with the pr-finisher skill.

Generated by [👨🍳 PR Sous Chef](htt...

Refreshed the branch from current main in merge commit 6274b77 and completed the required local validation.

github-actions · 2026-09-27T01:11:17Z

🎉 This pull request is included in a new release.

Release: v0.89.22

Initial plan

5fed847

Copilot AI assigned Copilot and pelikhan Sep 25, 2026

Copilot started work on behalf of pelikhan September 25, 2026 19:19

View session

Copilot AI linked an issue Sep 25, 2026 that may be closed by this pull request

Role gate rejects GitHub App (bot) actors on repository_dispatch #63066

Closed

Copilot AI and others added 2 commits September 25, 2026 19:26

Authorize allowlisted GitHub App actors on repository_dispatch

0cf9f7c

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Restrict repository_dispatch bot bypass to conclusive not-found lookups

2e3e906

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Fix role gate rejecting GitHub App actors on repository_dispatch~~ Authorize allowlisted GitHub App actors on repository_dispatch Sep 25, 2026

Copilot finished work on behalf of pelikhan September 25, 2026 19:28

Copilot AI requested a review from pelikhan September 25, 2026 19:28

pelikhan marked this pull request as ready for review September 25, 2026 19:53

Copilot AI balanced review requested due to automatic review settings September 25, 2026 19:53

Copilot started reviewing on behalf of pelikhan September 25, 2026 19:54

View session

Copilot AI reviewed Sep 25, 2026

View reviewed changes

github-actions Bot mentioned this pull request Sep 25, 2026

[pr-sous-chef] PR Sous Chef run report #63268

Closed

Copilot started work on behalf of gh-aw-bot September 25, 2026 20:03

View session

Deny empty-message lookup errors and correct dispatch docs

d9fc499

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot finished work on behalf of gh-aw-bot September 25, 2026 20:11

Copilot AI requested a review from gh-aw-bot September 25, 2026 20:11

Copilot started work on behalf of pelikhan September 25, 2026 20:55

View session

Document repository dispatch App authorization

fccae12

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan September 25, 2026 21:12

Copilot started work on behalf of gh-aw-bot September 25, 2026 21:13

View session

Copilot AI and others added 2 commits September 25, 2026 21:18

Merge remote-tracking branch 'origin/main' into copilot/fix-role-gate…

5aeb270

…-issues Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Merge main into authorization branch

41ca14d

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot finished work on behalf of gh-aw-bot September 25, 2026 21:31

Merge branch 'main' into copilot/fix-role-gate-issues

956e401

pelikhan merged commit 24043bc into main Sep 26, 2026
45 checks passed

pelikhan deleted the copilot/fix-role-gate-issues branch September 26, 2026 05:16

github-actions Bot mentioned this pull request Sep 26, 2026

Suggested test: copilot/repository-dispatch-bots-allowlist githubnext/gh-aw-test#18154

Open

Navigation Menu

Repository navigation

Authorize allowlisted GitHub App actors on repository_dispatch - #63492

Authorize allowlisted GitHub App actors on repository_dispatch#63492
pelikhan merged 8 commits into
mainfrom
copilot/fix-role-gate-issues

Copilot AI commented Sep 25, 2026 •

edited by github-actions Bot

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Copilot AI Sep 25, 2026

Uh oh!

Copilot AI Sep 25, 2026

Uh oh!

gh-aw-bot commented Sep 25, 2026

Uh oh!

pelikhan commented Sep 25, 2026

Uh oh!

gh-aw-bot commented Sep 25, 2026

Uh oh!

Copilot AI commented Sep 25, 2026

Uh oh!

Copilot AI commented Sep 25, 2026

Uh oh!

Uh oh!

github-actions Bot commented Sep 27, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants


		Omit `types:` to fire on any `event_type`.

		The dispatch sender still goes through the [role check](#filtering-by-repository-access-roles-onroles-onskip-roles). A PAT-based sender is checked against `on.roles:`; a GitHub App sender is never a repository collaborator and must be allowlisted with [`on.bots:`](#filtering-by-bot-onbots-onskip-bots).


		The `[bot]` suffix is optional — `github-actions` matches `github-actions[bot]` automatically.

		Allowlisted bots must be installed on the repository, which is verified through the repository collaborator API. GitHub App identities are not collaborators, so that lookup finds nothing for them. On `repository_dispatch` the check is therefore relaxed: an allowlisted App is authorized without the installation lookup, because sending the event already requires `contents: write` access to the repository. This is how an App-triggered `repository_dispatch` is admitted — `on.roles:` is matched against repository collaborator roles and never matches an App sender.

Conversation

Copilot AI commented Sep 25, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Copilot review overview

🟡 Changes recommended

Uh oh!

Uh oh!

Copilot AI Sep 25, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Sep 25, 2026

Choose a reason for hiding this comment

Uh oh!

gh-aw-bot commented Sep 25, 2026

Uh oh!

pelikhan commented Sep 25, 2026

Uh oh!

gh-aw-bot commented Sep 25, 2026

Uh oh!

Copilot AI commented Sep 25, 2026

Uh oh!

Copilot AI commented Sep 25, 2026

Uh oh!

Uh oh!

github-actions Bot commented Sep 27, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Copilot AI commented Sep 25, 2026 •

edited by github-actions Bot

Loading