attempt another AI CI workflow approach

[ilaflott]

Describe your changes

Issue ticket number and link (if applicable)

Fixes #XXX (replace XXX with the issue number and GitHub will autolink the PR to the issue)

Checklist before requesting a review

• I ran my code
• I tried to make my code readable
• I tried to comment my code
• I wrote a new test, if applicable
• I wrote new instructions/documentation, if applicable
• I ran pytest and inspected it's output
• I ran pylint and attempted to implement some of it's feedback
• No print statements; all user-facing info uses logging module

Note: If you are a code maintainer updating the tag or releasing a new fre-cli version, please use the release_procedure.md template. To quickly use this template, open a new pull request, choose your branch, and add ?template=release_procedure.md to the end of the url.

[ilaflott]

from the workflow i'm testing, seems like this could work, but i'm bumping up against the repo's config.

2026-07-15T16:45:02.2455646Z Error: Access denied by policy settings (Request ID: 9BC3:6ECB2:4F4E07:55B69F:6A57B90D)
2026-07-15T16:45:02.2456039Z 
2026-07-15T16:45:02.2456273Z Your Copilot CLI policy setting may be preventing access. This can happen when:
2026-07-15T16:45:02.2456939Z   • Your organization has restricted Copilot access
2026-07-15T16:45:02.2457514Z   • Your Copilot subscription does not include this feature
2026-07-15T16:45:02.2458369Z   • Required policies have not been enabled by your administrator
2026-07-15T16:45:02.2458760Z 
2026-07-15T16:45:02.2459111Z To resolve this, visit your Copilot settings: https://github.com/settings/copilot
2026-07-15T16:45:02.2673305Z ##[error]Process completed with exit code 1.

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[ilaflott]

probably if someone can turn on https://github.com/NOAA-GFDL/fre-cli/security/quality that might give us what we're looking for here

realized i did this for fremor awhile ago

[ilaflott]

meh, this all costs mucho $$$ now