Repository navigation

Probe authenticated MCP discovery #2

	name: Copilot web search diagnostic

	on:
	push:
	branches: [cklin/dependabot-web-search-diagnostic]

	permissions: {}

	jobs:
	discover:
	runs-on: ubuntu-latest
	timeout-minutes: 10
	permissions:
	contents: read
	copilot-requests: write
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
	with:
	persist-credentials: false
	- name: Prepare pinned CLI without credentials
	run: \|
	mkdir task diagnostics
	cp .github/dependabot-web-search-diagnostic.cjs task/probe.cjs
	docker run --rm \
	-v "$PWD/task:/task" \
	node:22.21.1-bookworm \
	npm install --quiet --prefix /task/cli @github/copilot@1.0.104
	- name: Discover MCP configuration and tools without inference
	env:
	GITHUB_TOKEN: ${{ github.token }}
	run: \|
	docker run --rm --init --cpus=2 --memory=6g \
	--user "$(id -u):$(id -g)" \
	--cap-drop=ALL --security-opt=no-new-privileges \
	-e GITHUB_TOKEN -e HOME=/tmp -e COPILOT_HOME=/diagnostics/copilot \
	-e GIT_CONFIG_COUNT=1 -e GIT_CONFIG_KEY_0=safe.directory \
	-e GIT_CONFIG_VALUE_0=/work \
	-e PATH=/task/cli/node_modules/.bin:/usr/local/bin:/usr/bin:/bin \
	-v "$PWD:/work" \
	-v "$PWD/task:/task:ro" \
	-v "$PWD/diagnostics:/diagnostics" \
	-w /work/extensions/ql-vscode node:22.21.1-bookworm \
	node /task/probe.cjs
	- uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
	if: always()
	with:
	name: web-search-diagnostic
	path: diagnostics/report.json
	if-no-files-found: error
	retention-days: 1