githubnext / githubnext/gh-aw-test

Suggested test: copilot/jobs-setup-steps-checkout-permission

Closed Beginner friendly
#14,992 0 comments 0 reactions 0 assignees View on GitHub
suggested new test
Dominant language
Shell
Stars
8
Forks
5
PR merge metrics
No merged PRs in 30d

Description

## Motivation

Link to the gh-aw PR: github/gh-aw#60137 — "Preserve contents permission for built-in job setup checkouts". Recompiling workflows previously dropped `contents: read` from `safe_outputs`/`conclusion` built-in jobs when `actions/checkout` was declared in job-level `setup-steps:`, breaking private-repo checkouts in those jobs.

## Proposed test

- **Workflow file**: `test-copilot-jobs-setup-steps-checkout-permission.md`
- **Trigger**: `workflow_dispatch`
- **Engine**: copilot
- **Safe output**: `create-issue`
- **Variant**: standard

## Minimal test prompt sketch

Declare `jobs.safe_outputs.setup-steps` with an `actions/checkout@v4` step plus an explicit `id-token: write` permission (pattern similar to the custom `setup` job in `test-copilot-restore-memory-custom-job.md`). Agent creates an issue confirming the run completed.

## New fixtures or secrets needed

None.

## Notes

No existing test exercises `jobs..setup-steps` with checkout to trigger the permission-inference path. Distinct from open suggestion #11354 (`safe-outputs.steps`, a different mechanism). Whether e2e.sh should also grep the lock file for `contents: read` needs triage.

> Generated by [🔍 Suggest New E2E Tests](https://github.com/githubnext/gh-aw-test/actions/runs/34580092090) · copilot · auto · 96 AIC · ⌖ 7.08 AIC · ⊞ 8.4K · [◷](https://github.com/search?q=repo%3Agithubnext%2Fgh-aw-test+is%3Aissue+%22gh-aw-workflow-call-id%3A+githubnext%2Fgh-aw-test%2Fsuggest-new-e2e-tests%22&type=issues)

Contributor guide

No contributing guide indexed for this repository

Research direction

Start with test-copilot-restore-memory-custom-job.md for the setup-steps pattern, then create test-copilot-jobs-setup-steps-checkout-permission.md using the stated workflow settings and prompt. Run the relevant copilot end-to-end test and inspect e2e.sh to decide whether the lock file should be checked. Done means the test confirms completion and covers the checkout permission path.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, shell
Domain
ci-cd, testing
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
78/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.