Rename tools.github.repos to tools.github.allowed-repos#22311
Conversation
- Add `AllowedRepos` field to `GitHubToolConfig`, keep `Repos` as deprecated - Update parser to handle `allowed-repos` (preferred) and deprecated `repos` with warning - Update validation to use `AllowedRepos` with updated error messages - Update MCP config and compiler to check `allowed-repos` first, fall back to `repos` - Add `allowed-repos` to JSON schema, mark `repos` as deprecated - Add codemod to auto-migrate `repos` → `allowed-repos` in `tools.github` - Update documentation, workflow examples, and regenerate frontmatter-full.md" Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> Agent-Logs-Url: https://github.com/github/gh-aw/sessions/7df0cf56-3abc-4ad0-9648-835882321816
tools.github.repos to tools.github.allowed-repos
|
@copilot merge main and recompile |
…github-repos # Conflicts: # docs/src/content/docs/reference/frontmatter-full.md # pkg/parser/schemas/main_workflow_schema.json
There was a problem hiding this comment.
Pull request overview
Renames the GitHub tools repository scope configuration key from tools.github.repos to the clearer tools.github.allowed-repos, while keeping backward compatibility via parsing fallback, schema deprecation, and an auto-migration codemod.
Changes:
- Added
allowed-reposto the workflow schema and markedreposas deprecated. - Updated workflow parsing/validation and MCP compilation paths to prefer
allowed-reposwhile still acceptingrepos. - Added a
gh aw fixcodemod to migratetools.github.repos→tools.github.allowed-repos, and updated docs/examples.
Reviewed changes
Copilot reviewed 15 out of 15 changed files in this pull request and generated 4 comments.
Show a summary per file
| File | Description |
|---|---|
| scratchpad/github-mcp-access-control-specification.md | Updates spec examples to use allowed-repos. |
| pkg/workflow/tools_validation.go | Validates guard policy using canonical AllowedRepos and updates related error messages. |
| pkg/workflow/tools_validation_test.go | Updates expected error substrings to reference allowed-repos. |
| pkg/workflow/tools_types.go | Adds AllowedRepos as the canonical guard-policy field; keeps Repos for legacy/deprecated support. |
| pkg/workflow/tools_parser.go | Parses allowed-repos (preferred) and falls back to repos with a deprecation warning. |
| pkg/workflow/mcp_github_config.go | Reads allowed-repos first (then repos) when rendering MCP guard policies. |
| pkg/workflow/compiler_github_mcp_steps.go | Reads allowed-repos first (then repos) for MCP step generation/debug output. |
| pkg/parser/schemas/main_workflow_schema.json | Introduces allowed-repos and adds deprecated repos alias in schema. |
| pkg/cli/fix_codemods.go | Registers the new GitHub repos → allowed-repos codemod. |
| pkg/cli/fix_codemods_test.go | Updates codemod registry count and expected ordering. |
| pkg/cli/codemod_github_repos.go | Implements frontmatter codemod to rename repos: to allowed-repos: under tools.github. |
| pkg/cli/codemod_github_repos_test.go | Adds unit tests covering common migration scenarios. |
| docs/src/content/docs/reference/github-tools.md | Updates reference docs and examples to tools.github.allowed-repos and documents migration path. |
| docs/src/content/docs/reference/frontmatter-full.md | Regenerates full frontmatter reference to reflect current schema (including allowed-repos). |
| .github/aw/create-agentic-workflow.md | Updates workflow template guidance to use allowed-repos. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
pkg/workflow/tools_validation.go
Outdated
| // Guard policy fields (allowed-repos/repos, min-integrity) are specified flat under github:. | ||
| // If allowed-repos/repos is not specified but min-integrity is, repos defaults to "all". |
There was a problem hiding this comment.
The docstring still says “repos defaults to "all"” even though the user-facing key is now allowed-repos (with repos deprecated). Please update the comment to refer to allowed-repos (and optionally mention the deprecated alias) to avoid confusing readers.
| // Guard policy fields (allowed-repos/repos, min-integrity) are specified flat under github:. | |
| // If allowed-repos/repos is not specified but min-integrity is, repos defaults to "all". | |
| // Guard policy fields (allowed-repos, min-integrity) are specified flat under github: (with deprecated alias 'repos' for 'allowed-repos'). | |
| // If allowed-repos (or deprecated alias repos) is not specified but min-integrity is, allowed-repos defaults to "all". |
pkg/workflow/tools_validation.go
Outdated
| // Default repos to "all" when not specified | ||
| if !hasRepos { | ||
| toolsValidationLog.Printf("Defaulting repos to 'all' in guard policy for workflow: %s", workflowName) |
There was a problem hiding this comment.
This log message says “Defaulting repos to 'all'” but the code now sets github.AllowedRepos. Consider updating the message to “allowed-repos” (or “allowed-repos/repos”) so the warning matches the current configuration key.
| // Default repos to "all" when not specified | |
| if !hasRepos { | |
| toolsValidationLog.Printf("Defaulting repos to 'all' in guard policy for workflow: %s", workflowName) | |
| // Default allowed-repos to "all" when not specified | |
| if !hasRepos { | |
| toolsValidationLog.Printf("Defaulting allowed-repos (repos) to 'all' in guard policy for workflow: %s", workflowName) |
pkg/cli/codemod_github_repos.go
Outdated
| githubAny, hasGitHub := toolsMap["github"] | ||
| if !hasGitHub { | ||
| return false | ||
| } | ||
| githubMap, ok := githubAny.(map[string]any) | ||
| if !ok { | ||
| return false | ||
| } | ||
| _, hasRepos := githubMap["repos"] | ||
| if hasRepos { | ||
| githubReposCodemodLog.Print("Deprecated 'repos' field found in tools.github") | ||
| } | ||
| return hasRepos |
There was a problem hiding this comment.
hasDeprecatedGitHubReposField returns true whenever tools.github.repos is present, even if tools.github.allowed-repos is already present. In that case, the codemod will rename repos: to allowed-repos: and can create duplicate allowed-repos keys in the YAML (invalid/ambiguous). Consider skipping the codemod when allowed-repos already exists, or removing repos instead of renaming when both are present.
|
|
||
| # Option 3: Set to false to disable the default checkout step. The agent job will | ||
| # not check out any repository (dev-mode checkouts are unaffected). | ||
| checkout: true |
There was a problem hiding this comment.
The generated example for the boolean checkout option is incorrect: the schema only allows checkout: false (enum [false]) to disable checkout, but this doc shows checkout: true. Please change the example to checkout: false (or remove the example line) so the docs match the schema.
| checkout: true | |
| checkout: false |
|
@copilot review comments |
Done — merged main (resolved conflicts in Warning Firewall rules blocked me from connecting to one or more addresses (expand for details)I tried to connect to the following addresses, but was blocked by firewall rules:
If you need me to access, download, or install something from one of these locations, you can either:
|
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> Agent-Logs-Url: https://github.com/github/gh-aw/sessions/0ef8a65f-4b40-4675-80f9-cf15b5764bf5
Addressed all 4 review comments in 1710ca8:
Warning Firewall rules blocked me from connecting to one or more addresses (expand for details)I tried to connect to the following addresses, but was blocked by firewall rules:
If you need me to access, download, or install something from one of these locations, you can either:
|
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> Agent-Logs-Url: https://github.com/github/gh-aw/sessions/0507d824-8474-4202-9dba-280bf852f337
Fixed in 2e7e1ce. The link in |
tools.github.reposwas confusing — users expected it to mean "grant access to these repos" when it actually restricts which repos the agent can access. Rename toallowed-reposto make intent unambiguous, with full backward compatibility and auto-migration.Changes
allowed-reposfield totools.githubin JSON schema; markedreposasdeprecatedallowed-repos(preferred) orrepos(emits deprecation warning, migrates toAllowedReposinternally)GitHubToolConfiggainsAllowedReposas the canonical field;Reposkept for schema round-trip onlyAllowedRepos; raw-map paths (mcp_github_config,compiler_github_mcp_steps) checkallowed-reposfirst, fall back toreposgh aw fixnow auto-migratesrepos:→allowed-repos:insidetools.githubblocksgithub-tools.md, regeneratedfrontmatter-full.md, updated.github/awworkflow examplesNew syntax
Old
repos:continues to work but emits a warning. Rungh aw fixto migrate automatically.Warning
Firewall rules blocked me from connecting to one or more addresses (expand for details)
I tried to connect to the following addresses, but was blocked by firewall rules:
https://api.github.com/graphql/usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw GO111MODULE ache/go/1.25.0/x--show-toplevel git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE 64/pkg/tool/linu--show-toplevel git(http block)/usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw git /usr/bin/wc git remo�� add origin /usr/bin/git 246176285/.githugit git /usr/bin/git git(http block)/usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw git /usr/bin/git git rev-�� HEAD git 0/x64/bin/node --show-toplevel git /usr/bin/git git(http block)https://api.github.com/orgs/test-owner/actions/secrets/usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name 5747734/b413/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE b/gh-aw/pkg/loggenv GOMODCACHE go env sdFl/I7quLUnZ5FkGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 5747734/b413/impGOPROXY(http block)/usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git orts930275055/00git GO111MODULE Name,createdAt,s--show-toplevel git rev-�� --show-toplevel go /usr/bin/gh licyMinIntegritygit GO111MODULE 1846631/b404/vet--show-toplevel gh(http block)https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1/usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha .github/workflows/test.md go /opt/hostedtoolcache/node/24.14.0/x64/bin/node -json GO111MODULE 64/bin/go node /tmp�� /home/REDACTED/work/gh-aw/gh-aw/.github/workflows/bot-detection.md go /opt/hostedtoolcache/node/24.14.0/x64/bin/node -json GO111MODULE 64/bin/go /opt/hostedtoolcache/node/24.14.0/x64/bin/node(http block)/usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel nly /usr/bin/git git conf�� --get remote.origin.url ache/node/24.14.0/x64/bin/node --show-toplevel infocmp /usr/bin/git ache/node/24.14.0/x64/bin/node(http block)https://api.github.com/repos/actions/checkout/git/ref/tags/v3/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha th .prettierignore --log-level=error k/gh-aw/gh-aw/pkg/parser/schemas/ ndor/bin/bash credential.helpe/opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/link(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha -aw/git/ref/tags/v2.0.0 GOPROXY /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/compile GOSUMDB GOWORK 64/bin/go /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/compile -o /tmp/go-build3501846631/b408/_pkg_.a -trimpath /usr/bin/git -p github.com/githurev-parse -lang=go1.25 git(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha runs/20260322-194104-33910/test-2114725946/.githremote.origin.url git /home/REDACTED/go/bin/bash --show-toplevel go /usr/bin/git bash --no�� --noprofile git /usr/bin/git --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/actions/checkout/git/ref/tags/v5/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha ./../pkg/workflo-errorsas --local nfig/composer/ve-nilfunc user.name(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env 72/001/test-frontmatter-with-nested-objects.md GO111MODULE util.test GOINSECURE GOMOD GOMODCACHE util.test(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --git-dir go /usr/bin/git -json GO111MODULE x_amd64/vet git rev-�� --show-toplevel x_amd64/vet /usr/bin/git -json GO111MODULE 64/bin/go git(http block)https://api.github.com/repos/actions/checkout/git/ref/tags/v6/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha user.name Test User /usr/bin/git k/gh-aw/gh-aw/pkgit k/gh-aw/gh-aw/pkrev-parse 64/bin/go git init�� ../../../.prettixterm-color /opt/hostedtoolcache/go/1.25.0/xGO111MODULE /usr/bin/git /tmp/go-build419git -trimpath 64/bin/go git(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha /tmp/go-build3501846631/b453/_pkg_.a -trimpath /usr/bin/git -p main -lang=go1.25 git add .github/workflows/test.md -dwarf=false /usr/bin/git go1.25.0 -c=4 -nolocalimports git(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git -json GO111MODULE ache/go/1.25.0/x--show-toplevel git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE .cfg git(http block)https://api.github.com/repos/actions/github-script/git/ref/tags/v8/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha -json 106bb2d493f778e3GOMOD 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE sh(http block)/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE sh -c npx prettier --cGOSUMDB GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go node(http block)/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE node /opt�� prettier --check 64/bin/go **/*.ts **/*.json --ignore-path go(http block)https://api.github.com/repos/actions/setup-go/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha --get remote.origin.url /usr/bin/git k/gh-aw/gh-aw/pkgit k/gh-aw/gh-aw/pkrev-parse 64/bin/go git conf�� -aw/git/ref/tags/v1.0.0 test@example.com /usr/bin/git /tmp/go-build419git -trimpath 64/bin/go git(http block)/usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha /repos/actions/github-script/git/ref/tags/v8 --jq e/git --show-toplevel 0602f89e /usr/bin/git e/git rev-�� --show-toplevel git /usr/bin/git --show-toplevel /opt/hostedtoolcrev-parse /usr/bin/git git(http block)https://api.github.com/repos/actions/setup-node/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha add origin /usr/bin/git che/go-build/ab/git **/*.cjs 64/bin/go git init�� ../../../.pretti-bool /opt/hostedtoolc-buildtags /usr/bin/git /tmp/go-build419git -trimpath nch,headSha,disp--show-toplevel git(http block)/usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha --show-toplevel git /opt/hostedtoolcache/node/24.14.0/x64/bin/node --show-toplevel 1846631/b430/reprev-parse /usr/bin/git node /tmp�� /home/REDACTED/work/gh-aw/gh-aw/.github/workflows/ai-moderator.md git /usr/bin/git --show-toplevel /opt/hostedtoolcrev-parse /usr/bin/git git(http block)https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq .object.sha -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 1846631/b429/vet.cfg GOINSECURE GOMOD GOMODCACHE grep(http block)/usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b/usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha h ../../../.prettierignore git 0/x64/bin/node --show-toplevel(http block)https://api.github.com/repos/github/gh-aw/usr/bin/gh gh api /repos/github/gh-aw --jq .visibility json' --ignore-premote.origin.url git r: $owner, name: $name) { hasDiscussionsEnabled } } user.email resolved$ /usr/bin/git git _har�� th .prettierigno-f git _modules/.bin/no-f --show-toplevel git /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq .object.sha -json GO111MODULE /bin/sh GOINSECURE GOMOD GOMODCACHE /bin/sh -c k/gh-aw/gh-aw/.github/workflows GOPROXY /usr/local/bin/bash GOSUMDB GOWORK 64/bin/go bash(http block)/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq .object.sha itattributes-test1667827166/.github/workflows git /usr/bin/git l 64/pkg/tool/linu-1 /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq .object.sha -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE /home/REDACTED/.dotnet/tools/bash GOINSECURE GOMOD GOMODCACHE bash(http block)/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel 64/pkg/tool/linu-1 /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts/usr/bin/gh gh run download 1 --dir test-logs/run-1 GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 1 --dir test-logs/run-1 git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git ache/node/24.14.0/x64/bin/node --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts/usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 12345 --dir test-logs/run-12345 git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts/usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 12346 --dir test-logs/run-12346 git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts/usr/bin/gh gh run download 2 --dir test-logs/run-2 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 2 --dir test-logs/run-2 git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts/usr/bin/gh gh run download 3 --dir test-logs/run-3 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 3 --dir test-logs/run-3 git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts/usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 4 --dir test-logs/run-4 git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts/usr/bin/gh gh run download 5 --dir test-logs/run-5 GO111MODULE x_amd64/link GOINSECURE GOMOD GOMODCACHE x_amd64/link env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE ef/N6GE9dzJuLpfUe9tz4e_/ThKvzodBlPIPkS6j74YO(http block)/usr/bin/gh gh run download 5 --dir test-logs/run-5 git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw/actions/workflows/usr/bin/gh gh workflow list --json name,state,path 5747734/b414/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE b/gh-aw/pkg/loggenv GOMODCACHE go env ae3Q/-oHPdAgNIy-GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 5747734/b414/impGOPROXY(http block)/usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 GOMOD GOMODCACHE node /hom�� --check **/*.cjs 64/bin/go **/*.json --ignore-path ../../../.pretti/tmp/gh-aw-test-runs/20260322-194002-29064/test-413975731/.github/workflows go(http block)/usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env y_with_explicit_repo1126540051/001 GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git ository }} GO111MODULE /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel go /usr/bin/git runs/20260322-19git GO111MODULE .cfg git(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq .object.sha lint:cjs GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go sh -c "prettier" --check 'scripts/**/*GOINSECURE bash 64/bin/go --noprofile -tests 64/bin/go go(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq .object.sha --show-toplevel 64/pkg/tool/linuowner/repo /usr/bin/git kflow.test --jq ortcfg.link git rev-�� b/workflows 2efhWi9M2e-nse98Ac/Nkj2eH9CDZC64a6m6QNA/Q8jLC1yB0SIk2xf3QUN0 e/git k/gh-aw/gh-aw/.ggit --jq 173a86aca8ae490f--show-toplevel e/git(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha npx prettier --cGOSUMDB GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go sh -c "prettier" --check 'scripts/**/*GOINSECURE bash 64/bin/go tierignore _value"]."\n"; 64/bin/go go(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha npx prettier --cGOSUMDB GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go sh -c "prettier" --che-p /opt/hostedtoolcgithub.com/github/gh-aw/pkg/constants 64/bin/go tierignore -tests 64/bin/go go(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha npx prettier --cGOSUMDB GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go node /hom�� --check scripts/**/*.js 64/bin/go .prettierignore -tests 64/bin/go go(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq .object.sha npx prettier --cGOSUMDB GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go sh -c "prettier" --che-errorsas bash 64/bin/go tierignore -tests 64/bin/go go(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq .object.sha --show-toplevel /usr/bin/git /usr/bin/git --get-regexp ^remote\..*\.gh--C /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git /tmp/gh-aw-test-git config /tmp/go-build3501846631/b441/tes-test.paniconexit0 git(http block)https://api.github.com/repos/githubnext/agentics/git/ref/tags//usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha re --log-level=error /opt/hostedtoolcache/node/24.14.0/x64/bin/node da3c0ed79a8b03f65a3bc5bcd89031bea0bd76ce79ba28d0-d /tmp/go-build350git infocmp /usr/bin/git git /pre�� --show-toplevel git 64/pkg/tool/linux_amd64/vet --show-toplevel git /usr/bin/git 64/pkg/tool/linurev-parse(http block)https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999/usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env y_with_repos=public_2564702176/001 GO111MODULE x86_64/bash GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git -json GO111MODULE Name,createdAt,s--show-toplevel git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE ache/go/1.25.0/x--show-toplevel git(http block)https://api.github.com/repos/nonexistent/repo/actions/runs/12345/usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE go env plorer.md GO111MODULE 64/bin/bash GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/owner/repo/actions/workflows/usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE b/gh-aw/pkg/strienv GOMODCACHE go env ZEU9/jerxdY-62TEGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 5747734/b425/impGOPROXY(http block)/usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE b/gh-aw/pkg/stylenv GOMODCACHE go env OtSB/1BXT0psTDMYGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 5747734/b427/impGOPROXY(http block)/usr/bin/gh gh workflow list --json name,state,path --repo owner/repo /usr/bin/git -json GO111MODULE /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE 0/x64/bin/node git(http block)https://api.github.com/repos/owner/repo/contents/file.md/tmp/go-build3501846631/b400/cli.test /tmp/go-build3501846631/b400/cli.test -test.testlogfile=/tmp/go-build3501846631/b400/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE sh(http block)/tmp/go-build1223168415/b376/cli.test /tmp/go-build1223168415/b376/cli.test -test.testlogfile=/tmp/go-build1223168415/b376/testlog.txt -test.paniconexit0 -test.timeout=10m0s rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE(http block)https://api.github.com/repos/test-owner/test-repo/actions/secrets/usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name 5747734/b403/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE bagabas/go-udiffenv GOMODCACHE go env TMZq/ffkCVWcA1pyGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 5747734/b403/impGOPROXY(http block)/usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git 14 GO111MODULE /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel go /usr/bin/git licyMinIntegritygit GO111MODULE ache/go/1.25.0/x--show-toplevel git(http block)If you need me to access, download, or install something from one of these locations, you can either:
💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.