Since @github/copilot-developer-action is Node you can send it a SIGUSR1 to enable Inspector then ask it for process.env and get all these variables that Copilot isn't supposed to see

GITHUB_COPILOT_API_TOKEN and GITHUB_PERSONAL_ACCESS_TOKEN are the same ghu_... and it is fine grained and short lived I wasn't able to test if I could push to non-copilot/ branches with it since it had already expired by then

ANTHROPIC_API_KEY, OPENAI_API_KEY, etc were not set 💔