Agentic workflows no longer need a personal access token - GitHub Changelog

You can now use GitHub Agentic Workflows with GitHub Actions’s built-in GITHUB_TOKEN.

This means that you no longer need to create and store a personal access token (PAT), eliminating the operational and security risks of managing long-lived PATs for automations at scale.

When you use the Actions token in an agentic workflow running in an organization-owned repository, AI credits consumed by your agentic workflow are billed directly to the organization.

Configuring organization billing for Copilot CLI in GitHub Agentic Workflows

In order to use this feature, you must enable the “Allow use of Copilot CLI billed to the organization” Copilot policy. This is enabled by default if you have the existing “Copilot CLI” policy enabled.