GitHub setup starts
with your goal.
Start in Copilot CLI with one prompt. The agent checks current state and asks for the decisions it cannot answer through GitHub.
Install once
Use GitHub Copilot CLI, signed in to your Copilot account. Install GitHub CLI (gh) and jq, then authenticate gh to the intended GitHub host. The enterprise must already exist.
After this package is published, install the plugin from your terminal. You do not need to clone the curriculum or register an MCP server.
copilot plugin marketplace add microsoft/frontier-agentic-devops-rvas
copilot plugin install github-enterprise-setup@frontier-agentic-devops
copilot skill list
Check that github-enterprise-setup appears under the plugin source. Open a new Copilot session from the directory where you want to work:
copilot
To update the plugin, run these commands in your terminal:
copilot plugin marketplace update frontier-agentic-devops
copilot plugin update github-enterprise-setup
To remove the plugin:
copilot plugin uninstall github-enterprise-setup
Describe the setup you need
Replace the placeholders below and send this prompt in Copilot. Use github.com or your enterprise's full ghe.com hostname.
Use the github-enterprise-setup skill to set up enterprise <enterprise-slug>
on <host>, covering organizations <org-slugs>.
My goal is <outcome>. Assess current state and recommend changes.
Ask only for unresolved decisions. Save a plan without changing GitHub.
For the outcome, describe the result you need, such as aligning organization governance or setting up team and repository access.
The skill starts Plan. It checks the target and active identity, then gathers the read-only evidence your outcome needs. Scoped inventories run without another skill-level approval question. Copilot's tool permissions still apply.
The agent recommends changes and asks one unresolved decision at a time. Questions depend on your target and goal. Values already supplied or proved through discovery carry forward.
Plan saves assessment.json, plan.md, and plan.json in a private run directory. The default is $HOME/.github-enterprise-setup/<enterprise>/<UTC timestamp>/. Keep this directory outside source control.
Review before requesting Apply
Read plan.md. Check the target, proposed changes, verification checks, and any cost or license effects. Resolve blocked prerequisites and owner handoffs before expecting those operations to run.
When the plan matches your decisions, tell the agent:
Proceed with the reviewed plan. Present the first write batch for approval.
This requests Apply; it does not approve a write. Review and approve each batch. High-impact changes need a separate typed confirmation. The agent asks before switching accounts or changing authentication scopes.
The agent rereads write preconditions, performs the approved operations, and verifies their results. An accepted API request alone is not a verified result. Failed or uncertain writes remain visible.
Continue saved work
In the same conversation, ask the agent to continue. It reuses the known target and run directory. In a new conversation, supply the full path:
Use the github-enterprise-setup skill to resume the run at <absolute-run-path>.
Recheck identity and live state before continuing.
Resume checks the saved artifacts and reconciles uncertain writes before continuing. Changed targets or effects need new approval. Keep unverified work separate from completed operations.
Get recommendations without a change plan
Use the github-enterprise-setup skill in Assess mode for enterprise
<enterprise-slug> on <host>, covering <scope>. Report gaps and prioritized
recommendations. Do not create a change plan or change GitHub.
Assess stops after the report. Ask to continue into Plan when you want to turn selected recommendations into proposed changes.
Use the hands-on sessions for controls your team needs to learn or test.