Add ghhelper package for consistent GH_TOKEN/GITHUB_TOKEN handling in gh CLI calls

[Copilot]

The codebase had 14 direct exec.Command("gh", ...) calls that didn't handle GH_TOKEN/GITHUB_TOKEN fallback, causing authentication failures when only GITHUB_TOKEN is set.

Changes

• New package pkg/ghhelper: Provides ExecGH() that automatically sets GH_TOKEN from GITHUB_TOKEN when GH_TOKEN is unset
• Updated 14 instances across 7 files to use ghhelper.ExecGH():
  • pkg/cli/logs_download.go - workflow logs and artifact downloads
  • pkg/cli/trial_command.go - user authentication
  • pkg/cli/update_command.go - release/branch/content fetching
  • pkg/cli/pr_command.go - user permissions and PR info
  • pkg/parser/frontmatter.go - remote file downloads
  • pkg/cli/logs.go - job status and details fetching
  • pkg/cli/audit.go - run metadata fetching
• Backward compatibility: pkg/workflow/gh_helper.go now delegates to ghhelper.ExecGH()

Example

Before:

cmd := exec.Command("gh", "api", "/user", "--jq", ".login")
output, err := cmd.Output()  // Fails when only GITHUB_TOKEN is set

After:

cmd := ghhelper.ExecGH("api", "/user", "--jq", ".login")
output, err := cmd.Output()  // Works with both GH_TOKEN and GITHUB_TOKEN

The helper checks for GH_TOKEN first, falls back to GITHUB_TOKEN if unset, and passes through to default gh auth otherwise.

Original prompt

• Add a dedicated exec helper for "gh api ..." calls that handles GH_TOKEN/GITHUB_TOKEN references.
• Find all instances of "gh api" calls and use new helper.

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[pelikhan]

@copilot look for all instances of the string"api" (with quotes) to find all the calls to gh api and update to use this helper.

[pelikhan]

@copilot move helper to github.go in pkg/workflow

[Copilot]

@copilot look for all instances of the string"api" (with quotes) to find all the calls to gh api and update to use this helper.

Found and updated 3 additional instances of gh api calls in pkg/cli/logs.go (2 calls) and pkg/cli/audit.go (1 call). All now use ghhelper.ExecGH(). Commit: 7273269

[Copilot]

Pull Request Overview

This PR adds a new pkg/ghhelper package to centralize GH_TOKEN/GITHUB_TOKEN handling for gh CLI calls, preventing authentication failures when only GITHUB_TOKEN is set. The implementation extracts existing logic from pkg/workflow/gh_helper.go into a standalone package and updates 11 instances across 5 files to use the new helper function.

Key Changes

• New ghhelper.ExecGH() function provides automatic GH_TOKEN/GITHUB_TOKEN fallback with proper logging
• Updated existing pkg/workflow/gh_helper.go to delegate to the new implementation while maintaining backward compatibility
• Replaced direct exec.Command("gh", ...) calls with ghhelper.ExecGH(...) in 5 files for consistent token handling

Reviewed Changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
pkg/ghhelper/gh_helper.go	New package providing centralized GH_TOKEN/GITHUB_TOKEN handling for gh CLI commands with proper environment variable precedence and logging
pkg/ghhelper/gh_helper_test.go	Comprehensive test coverage for the new helper function, including scenarios for token precedence and multi-argument commands
pkg/workflow/gh_helper.go	Simplified to delegate to ghhelper.ExecGH() while maintaining backward compatibility with deprecation notice
pkg/parser/frontmatter.go	Updated GitHub file download to use ghhelper.ExecGH() for consistent authentication
pkg/cli/update_command.go	Updated 5 instances of gh API calls (releases, branches, content) to use the new helper
pkg/cli/trial_command.go	Updated user authentication API call to use the new helper
pkg/cli/pr_command.go	Updated 5 instances of gh API calls (user info, permissions, PR info) to use the new helper
pkg/cli/logs_download.go	Updated workflow logs and artifact downloads to use the new helper, removed redundant os/exec import

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.