Repository navigation
Pin coverage improver to checksum-reviewed Copilot CLI - #15444
Conversation
Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
There was a problem hiding this comment.
🔵 Needs a closer look
Source and lock agree, but the pinned installer’s checksum support could not be independently verified.
No open issues 🎉
What changed in this PR
Pins Test Coverage Improver’s Copilot CLI to address the installation failure reported in #15436, which prevented agent startup.
Changes:
- Select Copilot CLI
1.0.98explicitly in the workflow source. - Regenerate the lock file to pass that version directly to the installer and report it in runtime metadata, without changing existing security controls.
| File | Description |
|---|---|
.github/workflows/test-coverage-improver.md |
Pins the Copilot engine version to 1.0.98. |
.github/workflows/test-coverage-improver.lock.yml |
Updates the installer argument, version metadata, and source hash. |
Review effort: Max
|
@copilot merge main, resolve conflicts, and address review feedback |
Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
Merged |
Test Coverage Improver failed before agent startup: live compatibility resolution selected Copilot CLI
1.0.101, but the pinned setup action had no reviewed checksum for that release.engine.versionto1.0.98, which the existing setup action can verify.