Copilot Usage Metrics Reports Move to GitHub-Owned URLs

TL;DR

• Copilot usage metrics report download URLs migrated from Azure Front Door to GitHub-owned domains
• Enterprise teams need to update firewall/proxy allowlists with new domains
• Legacy Azure URLs still work during transition, but update your allowlists now

What Dropped

GitHub moved Copilot usage metrics report downloads from Azure Front Door infrastructure to stable, GitHub-owned domains. For github.com customers, that's copilot-reports.github.com. For GHE.com customers, it's copilot-reports.SUBDOMAIN.ghe.com.

The Dev Angle

If you're pulling Copilot usage data via the Copilot Usage Metrics API, the download URLs returned by that endpoint have changed. The old pattern was copilot-reports-*.b01.azurefd.net — infrastructure-specific and fragile. The new pattern is predictable and won't shift when GitHub redeploys services.

For enterprise security teams, this is a win. You get a single, stable domain to allowlist instead of managing wildcard Azure Front Door patterns. If you're running automation that downloads reports or integrates metrics into dashboards, those scripts won't break when infrastructure changes happen behind the scenes.

The legacy Azure URLs still work during a transition period, but GitHub will deprecate them eventually. In rare cases where Azure Front Door is unavailable, downloads may fall back to direct Azure Blob Storage (*.blob.core.windows.net) — so if your org requires uninterrupted access during outages, add that to your allowlist too.

Should You Care?

If you're an enterprise customer with firewall or proxy rules: Yes. Update your allowlists now. Add copilot-reports.github.com (or your GHE.com subdomain equivalent) and test before the legacy domains are deprecated. This is a one-time change that prevents future breakage.

If you're using the Copilot Usage Metrics API: Your code will keep working, but the URLs in the API response will change. If you're logging, caching, or validating those URLs, update your logic to expect the new domain.

If you're not using Copilot metrics reporting: Nothing to do.

This is a straightforward infrastructure upgrade that removes a dependency on Azure-specific domains. It's the kind of change that looks small but prevents headaches when services get redeployed. For more details, check the Copilot allowlist reference.

Source: GitHub Changelog