How can I allow GitHub Copilot Agents to access my GitHub packages that are private (Nuget / NPM)

[markti]

Select Topic Area

Question

Copilot Feature Area

General

Body

I am using the agents in the github website under the agents tabs of my repos AND I am publishing private nugets to GitHub. locally I have configured Nuget package source and npm package source and authenticated with a PAT token however. I dont want to check in a pat token to my codebase so how can the github copilot agents that are running on github (not locally on my machine) get access to the packages?

[Markosjr]

1 - Settings > Environments > copilot → Add secret: NuGetPackageSourceCredentials_MyFeed = Username=TOKEN_PLACEHOLDER;Password=${{ secrets.GITHUB_TOKEN }}

2 - Commit nuget.config without credentials:

3 - GITHUB_TOKEN already has read:packages scope for your repo/org.

Agent pulls auth from env vars automatically on dotnet restore. Zero PATs in code!