GitHub Enterprise setup skill

Plan before
you change GitHub.

Tell Copilot what your enterprise needs. The skill checks GitHub, recommends changes, and saves a plan for you to review.

Install and start → Already installed? Start a plan

Get to your first plan

You need an existing GitHub Enterprise Cloud account, Copilot CLI, gh, and jq. The skill helps you plan changes; it does not create the enterprise account.

  1. Install the plugin

    Add the setup skill to Copilot CLI. If it is already installed, go straight to your goal.

  2. Describe your goal

    Name your enterprise, host, and organizations. Plan mode checks GitHub without making changes.

  3. Review the saved plan

    Check the proposed changes and cost or license effects. Request Apply only when ready, then approve each write batch.

Preview: live end-to-end setup validation is still pending. Complete a controlled live setup before production use.

Set up or align an enterprise

Use the skill for coordinated changes across an existing GitHub Enterprise Cloud account on github.com or your enterprise's ghe.com host.

Describe the outcome in your own words. For example, align organization governance, set up teams and repository access, or roll out Copilot. The skill narrows the work to that outcome.

  • Organization and access: plan landing zones, identity requirements, and team access.
  • Repositories and delivery: plan repository factories, rulesets, and Actions policies.
  • Security and Copilot: assess rollout needs, settings, and licensing effects.
  • Governance: trace effective policy to its source and track work another owner needs to do.

One prompt starts the guided workflow. In Plan mode, the agent inspects GitHub without making changes and prioritizes its recommendations. It asks only for unresolved decisions, one at a time.

The skill can run required read-only inventories within your requested scope without asking for another approval. Copilot's tool permissions and your organization's policies still apply.

How the skill works

What the skill covers

GOV

Governance and identity

Enterprise policies, organization boundaries, ownership, audit access, and identity handoffs.

  • Enterprise or organization baseline
  • EMU, SAML, SCIM, and IdP boundaries
ACC

Teams and repository access

Team structure, inherited permissions, outside collaborators, and repository roles.

  • Team-first access design
  • Effective access checks
PLT

Repository and Actions platform

Repository factories, rulesets, workflow policy, runners, environments, and cloud trust handoffs.

  • Standards and protected defaults
  • Actions policy and runner model
SEC

Security and Copilot rollout

Code security coverage, rollout waves, Copilot seats and controls, licensing, and verification evidence.

  • CodeQL and secret protection
  • Scoped Copilot rollout
Start with an outcome

Prompts to adapt for your enterprise

Establish a governance baseline

Use the github-enterprise-setup skill in Plan mode for enterprise <enterprise> on <host>. Assess governance, identity, Actions, security, and Copilot. Save a reviewed plan without changing GitHub.

Align one organization

Use the github-enterprise-setup skill to align organization <org> in enterprise <enterprise>. Review teams, repository access, rulesets, and Actions policy. Ask one unresolved decision at a time, then save the plan.

Roll out GitHub Copilot

Use the github-enterprise-setup skill to plan a GitHub Copilot rollout for <enterprise or org>. Check seat management, policy inheritance, agent controls, estimated seat changes, and rollout evidence. Do not make changes.

Plan a security rollout

Use the github-enterprise-setup skill to plan code security for organizations <orgs>. Assess entitlements, CodeQL coverage, secret scanning, push protection, exceptions, and rollout waves. Save a plan without changing GitHub.

Before you start

You need GitHub Copilot CLI installed and signed in, GitHub CLI (gh), and jq. Authenticate gh to the intended host with an account that can inspect the selected resources. Changes may require an enterprise or organization owner.

The enterprise account must already exist. The skill checks prerequisites for your outcome. It flags work that the available APIs cannot perform or that an owner in your identity provider or another external system must do.

The skill does not administer GitHub Enterprise Server, deploy Azure infrastructure, or run the curriculum's lab provisioners. Use the hands-on sessions to learn a control or test the result with your team.

Read the setup guide →