Skip to content

Chore: [AEA-0000] - sync copilot #119

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
anthony-nhs merged 3 commits into from
Apr 1, 2026
Merged

Chore: [AEA-0000] - sync copilot #119

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
b9a0882
sync copilot
anthony-nhs Mar 30, 2026
47d9c9b
fix
anthony-nhs Apr 1, 2026
5fb0562
Merge branch 'main' into sync_copilot
anthony-nhs Apr 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 1 addition & 2 deletions .devcontainer/devcontainer.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,6 +52,5 @@
},
"remoteEnv": {
"LOCAL_WORKSPACE_FOLDER": "${localWorkspaceFolder}"
},
"postAttachCommand": "git-secrets --register-aws; git-secrets --add-provider -- cat /usr/share/secrets-scanner/nhsd-rules-deny.txt"
}
}
4 changes: 2 additions & 2 deletions .github/dependabot.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ updates:
commit-message:
prefix: "Upgrade: [dependabot] - "
cooldown:
default-days: 3
default-days: 7

- package-ecosystem: "pip"
directory: "/"
Expand All @@ -23,4 +23,4 @@ updates:
commit-message:
prefix: "Upgrade: [dependabot] - "
cooldown:
default-days: 3
default-days: 7
22 changes: 22 additions & 0 deletions .github/workflows/sync_copilot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
name: Sync Copilot Instructions

on:
workflow_dispatch:
schedule:
- cron: '0 6 * * 1'

jobs:
sync-copilot-instructions:
runs-on: ubuntu-22.04
environment: create_pull_request
Copy link

Copilot AI Mar 30, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

environment: create_pull_request will apply any environment protection rules (e.g., required reviewers) to this scheduled job. If that environment is protected, the weekly cron run will queue awaiting approval. If you don’t need environment-scoped secrets/protections here, consider removing the environment to avoid gating scheduled runs.

Suggested change
environment: create_pull_request

Copilot uses AI. Check for mistakes.
permissions:
contents: read
Copy link

Copilot AI Mar 30, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This workflow appears to create a pull request (it passes CREATE_PULL_REQUEST_* secrets), but the job permissions only grant contents: read. To match other PR-creating workflows in this repo (e.g. .github/workflows/update_dev_container_version.yml), add pull-requests: write (and, if the action uses GITHUB_TOKEN to push commits/branches, also contents: write) so the workflow doesn’t fail due to insufficient token permissions.

Suggested change
contents: read
contents: write
pull-requests: write

Copilot uses AI. Check for mistakes.

steps:
- name: Sync shared instructions
uses: NHSDigital/eps-copilot-instructions@a7849a16aabd5c1edef13e29467a480fa08555f8
with:
copilot_instructions_ref: main
calling_repo_base_branch: main
CREATE_PULL_REQUEST_APP_ID: ${{ secrets.CREATE_PULL_REQUEST_APP_ID }}
CREATE_PULL_REQUEST_PEM: ${{ secrets.CREATE_PULL_REQUEST_PEM }}
24 changes: 14 additions & 10 deletions .github/workflows/update_dev_container_version.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,19 +1,23 @@
name: Update Devcontainer Version
name: Update devcontainer version

on:
workflow_dispatch:
schedule:
- cron: "0 18 * * 4"
- cron: '0 6 * * 4'
permissions: {}

jobs:
update_devcontainer_version:
uses: NHSDigital/eps-common-workflows/.github/workflows/update-dev-container-version.yml@23342d86a245c076937abd6aecdd0ce06446b1e6
update-devcontainer-version:
runs-on: ubuntu-22.04
environment: create_pull_request
permissions:
contents: read
packages: read
pull-requests: write
with:
base_branch: main
secrets:
CREATE_PULL_REQUEST_APP_ID: ${{ secrets.CREATE_PULL_REQUEST_APP_ID }}
CREATE_PULL_REQUEST_PEM: ${{ secrets.CREATE_PULL_REQUEST_PEM }}

steps:
- name: Update devcontainer version
uses: NHSDigital/eps-update-devcontainer@dc3a8c5f11e7226ee4f5f2bb35bd0d1265092306
with:
calling_repo_base_branch: main
CREATE_PULL_REQUEST_APP_ID: ${{ secrets.CREATE_PULL_REQUEST_APP_ID }}
CREATE_PULL_REQUEST_PEM: ${{ secrets.CREATE_PULL_REQUEST_PEM }}
20 changes: 20 additions & 0 deletions .pre-commit-config.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,26 @@ repos:

- repo: local
hooks:
- id: check-commit-signing
name: Check commit signing
description: Ensures that commits are GPG signed
entry: bash
args:
- -c
- |
if ! git config --get commit.gpgsign | grep -q "true" > /dev/null 2>&1; then
echo "Error: Commit signing is not enabled."
echo "Please enable commit signing with:"
echo " git config commit.gpgsign true"
echo ""
echo "For more information, see: https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits"
exit 1
fi
echo "Commit signing is properly configured."
language: system
pass_filenames: false
always_run: true

- id: git-secrets
name: Git Secrets
description: git-secrets scans commits, commit messages, and --no-ff merges to prevent adding secrets into your git repositories.
Expand Down
Loading