[workshop-sync] workshop/side-quest-17-01-mcp-concepts.md: default and code_security toolset descriptions are inaccurate

[github-actions]

Workshop file reviewed

workshop/side-quest-17-01-mcp-concepts.md

Problem

The file misdescribes the GitHub MCP server's default toolset and the code_security toolset.

1. In the "What the tools: frontmatter block does" table:

   toolsets: [default] | Specifies which groups of tools to expose. default includes issues, PRs, commits, and Actions.

2. In the "How toolsets work" table:

   | default | Issues, pull requests, commits, Actions runs, file contents |

3. Also in the "How toolsets work" table:

   | code_security | Dependabot alerts, code scanning alerts |

Current correct behaviour

Per the current gh-aw reference docs (reference/github-tools):

• The default shorthand expands to context, repos, issues, pull_requests, users — it does not include actions (Actions runs/workflows). Commits and file contents fall under the repos toolset, not a separate "commits" category. To grant Actions access, actions must be added explicitly (e.g. toolsets: [default, actions]).
• dependabot is a separate, distinct toolset from code_security and must be opted into explicitly (it is excluded even from toolsets: [all]). code_security does not cover Dependabot alerts.

Suggested fix

• Update the "What the tools: frontmatter block does" table row for toolsets: [default] to read something like: "default expands to context, repos (includes commits/file contents), issues, pull_requests, and users. Add actions explicitly for Actions run access."
• Update the toolsets table's default row to match: "Context, repository operations (commits, file contents), issues, pull requests, users."
• Update the code_security row to remove "Dependabot alerts" (that's the separate dependabot toolset) and describe it as covering code scanning alerts only.

Reference: https://github.github.com/gh-aw/reference/github-tools/#github-toolsets

Generated by 🔍 Workshop Sync Check · copilot · auto · 210.1 AIC · ⌖ 4.91 AIC · ⊞ 8.2K · ◷

• expires on Sep 21, 2026, 6:51 PM UTC