Copilot CLI no longer needs a personal access token in GitHub Actions - GitHub Changelog

You can now run GitHub Copilot CLI in GitHub Actions using the built-in GITHUB_TOKEN.

This means that you no longer need to create and store a personal access token (PAT), eliminating the operational and security risks of managing long-lived PATs for automations at scale.

When you run Copilot CLI with the Actions token in an organization-owned repository, AI credits consumed by the CLI are billed directly to the organization.

Configuring organization billing for Copilot CLI in GitHub Actions

In order to use this feature, you must enable the “Allow use of Copilot CLI billed to the organization” Copilot policy. This is enabled by default if you have the existing “Copilot CLI” policy enabled.