{"meta":{"title":"Configuring settings for GitHub Copilot cloud agent","intro":"Learn how to configure settings for Copilot cloud agent","product":"GitHub Copilot","breadcrumbs":[{"href":"/en/copilot","title":"GitHub Copilot"},{"href":"/en/copilot/how-tos","title":"How-tos"},{"href":"/en/copilot/how-tos/use-copilot-agents","title":"Use Copilot agents"},{"href":"/en/copilot/how-tos/use-copilot-agents/cloud-agent","title":"Cloud agent"},{"href":"/en/copilot/how-tos/use-copilot-agents/cloud-agent/configuring-agent-settings","title":"Configuring agent settings"}],"documentType":"article"},"body":"# Configuring settings for GitHub Copilot cloud agent\n\nLearn how to configure settings for Copilot cloud agent\n\n## Enabling or disabling built-in code quality and security validation tools\n\nBy default, Copilot cloud agent checks code it generates for security issues and gets a second opinion on its code with Copilot code review. It attempts to resolve issues identified prior to completing the pull request. This improves code quality and reduces the likelihood of the code generated by Copilot cloud agent introducing problems such as hardcoded secrets, insecure dependencies, and other vulnerabilities.\n\nOptionally, you can choose to disable these tools to help Copilot work faster or avoid conflicts with other code quality or security products you're using.\n\nYou must be a repository administrator to configure these settings.\n\n1. On GitHub, navigate to the main page of the repository.\n2. Under your repository name, click ** Settings**. If you cannot see the \"Settings\" tab, select the **** dropdown menu, then click **Settings**.\n\n \n3. In the \"Code & automation\" section of the sidebar, click **Copilot** then **Cloud agent**.\n4. In the \"Validation tools\" section, toggle the tool, or tools, you want to enable or disable.\n\n## Allowing GitHub Actions workflows to run automatically when Copilot pushes\n\nBy default, GitHub Actions workflows will not run automatically when Copilot pushes changes to a pull request.\n\nGitHub Actions workflows can be privileged and have access to sensitive secrets. Inspect the proposed changes in the pull request and ensure that you are comfortable running your workflows on the pull request branch. You should be especially alert to any proposed changes in the `.github/workflows/` directory that affect workflow files.\n\nTo allow GitHub Actions workflows to run, click the **Approve and run workflows** button in the pull request's merge box.\n\n\n\nOptionally, you can configure Copilot cloud agent to allow GitHub Actions workflows to run without human intervention.\n\n> \\[!WARNING] Allowing GitHub Actions workflows to run without approval may allow unreviewed code written by Copilot to gain write access to your repository or access your GitHub Actions secrets.\n\nYou must be a repository administrator to configure these settings.\n\n1. On GitHub, navigate to the main page of the repository.\n2. Under your repository name, click ** Settings**. If you cannot see the \"Settings\" tab, select the **** dropdown menu, then click **Settings**.\n\n \n3. In the \"Code & automation\" section of the sidebar, click **Copilot** then **cloud agent**.\n4. In the \"Actions workflow approval\" section, disable the **Require approval for workflow runs** setting."}