From adaccaee8ce68457b5921ae2d00bb9899d10942a Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 17:13:07 +0000 Subject: [PATCH] docs: fix conclusion job token reference and create-prompt field list - docs/conclusion.md: line 94 said only SYSTEM_ACCESSTOKEN but after fix #1689 the Conclusion job also acquires SC_WRITE_TOKEN when permissions.write is configured; make it consistent with lines 113-118 - prompts/create-ado-agentic-workflow.md: add execution-context, variable-groups, post-steps, and env to the optional front-matter fields list so agents know these keys exist when authoring workflows Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- docs/conclusion.md | 2 +- prompts/create-ado-agentic-workflow.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/conclusion.md b/docs/conclusion.md index 36885aa7..cdbc5261 100644 --- a/docs/conclusion.md +++ b/docs/conclusion.md @@ -91,7 +91,7 @@ safe-outputs: The job downloads the `safe_outputs` artifact, reads `safe-outputs-executed.ndjson`, checks upstream Agent / Detection / SafeOutputs job results, and then files or comments on Azure DevOps -work items using `SYSTEM_ACCESSTOKEN`. +work items using `SYSTEM_ACCESSTOKEN` (or `SC_WRITE_TOKEN` when a write service connection is configured). Per-tool config is passed from the compiler to `conclusion.js` as individual flat env vars per field (e.g. `AW_NOOP_TITLE_PREFIX`, diff --git a/prompts/create-ado-agentic-workflow.md b/prompts/create-ado-agentic-workflow.md index a5b7b2c4..ce3b9c78 100644 --- a/prompts/create-ado-agentic-workflow.md +++ b/prompts/create-ado-agentic-workflow.md @@ -33,7 +33,7 @@ If interactive, ask only missing essentials first. ### 2. Build Front Matter Use only required keys plus task-required options: - `name`, `description` -- optional: `target`, `engine`, `workspace`, `pool`, `repos`, `tools`, `runtimes`, `mcp-servers`, `safe-outputs`, `on`, `steps`, `setup`, `teardown`, `permissions`, `parameters` +- optional: `target`, `engine`, `workspace`, `pool`, `repos`, `tools`, `runtimes`, `mcp-servers`, `safe-outputs`, `on`, `steps`, `post-steps`, `setup`, `teardown`, `permissions`, `parameters`, `execution-context`, `variable-groups`, `env` Rules: - Omit fields that equal defaults.