Repository navigation
[copilot-cli-research] Copilot CLI Deep Research - 2026-10-18 #69832
Description
Analysis Date: 2026-10-18
Repository: github/gh-aw
Scope: 344 workflows, ~138 Copilot engine declarations
📊 Executive Summary
Copilot engine adoption continues to grow (previous run: 299 workflows, now 344). Strict mode is widespread (221 workflows), toolsets are scoped (186), timeouts are set (332), and cache-memory (109) and repo-memory (36) are common. Advanced CLI surface remains lightly used.
Primary recommendation: Standardize guardrails (max-turns/max-continuations, version pinning) and pilot --share/session capture on complex workflows.
Critical Findings
🔴 High Priority
- Version pinning: only ~47 of 344 workflows set
version:; Copilot CLI drift can break runs. Pin for production workflows. - Runaway guardrails:
max-turnsin 39 workflows andmax-continuationsin 10; autopilot (--autopilot,--max-autopilot-continues) workflows without caps risk cost blowups.
🟡 Medium Priority
--shareused in 1 workflow; conversation transcripts would aid auditing/debugging.--add-dirmanually used in 1 workflow; engine handles it by default, so review for redundancy.--disable-builtin-mcpsin 2 workflows; consider for minimal-tool workflows to reduce token overhead.- BYOK (
COPILOT_PROVIDER) used in 3 workflows; plugins config used in 0 — document and pilot. - Custom
mcp-servers:used in only 1 workflow.
<b>Full Analysis</b>
Feature Usage (current vs. previous run 2026-09-08)
| Feature | Prev | Now |
|---|---|---|
| Total workflows | 299 | 344 |
| --share | 1 | 1 |
| --add-dir manual | 1 | 1 |
| disable-builtin-mcps | 2 | 2 |
| max-turns | 30 | 39 |
| max-continuations | n/a | 10 |
| BYOK | 3 | 3 |
| plugins | 0 | 0 |
| repo-memory | 38 | 36 |
CLI flags emitted by pkg/workflow/copilot_engine_execution.go: --add-dir, --agent, --allow-all-paths, --allow-tool, --autopilot, --deny-tool, --disable-builtin-mcps, --headless, --host, --log-dir, --log-level, --max-autopilot-continues, --no-ask-user, --no-auto-update, --no-custom-instructions, --port.
Best Practices
- Pin
engine.versionfor scheduled workflows. - Always cap turns/continuations.
- Keep toolsets narrowly scoped.
- Use strict mode and network allowlists.
Action Items
- Audit unpinned scheduled workflows
- Add max-turns/continuations to uncapped autopilot workflows
- Pilot
--shareon 2-3 complex workflows - Document plugins and BYOK usage
Methodology
Counted frontmatter patterns across .github/workflows/*.md via grep; reviewed pkg/workflow/copilot_*.go; compared with repo-memory snapshot. Counts are grep-based approximations.
Generated by Copilot CLI Deep Research (Run: 39094826965)
Generated by 🔬 Copilot CLI Deep Research Agent · copilot · auto · 14.8 AIC · ⌖ 0.702 AIC · ⊞ 11.4K · ◷
- expires on Oct 18, 2026, 7:51 PM UTC-08:00
Activity
github-actions commentedon Oct 19, 2026
This issue is being closed as outdated. A newer issue has been created: #70138
View newer issue
This action was performed automatically by the
Copilot CLI Deep Research Agentworkflow.