fix: recompile smoke-codex workflow with gh-aw v0.64.2 to unblock github.com by Copilot · Pull Request #1483 · github/gh-aw-firewall

Copilot · 2026-03-28T14:55:59Z

The smoke-codex agent job has been failing consistently because github.com was absent from the AWF firewall allowlist — the lock file was compiled with gh-aw v0.58.2, whose github domain group didn't include github.com. The Codex CLI requires direct access to github.com from within the sandbox, causing Execute Codex to exit non-zero.

Changes

smoke-codex.md: Remove sandbox.mcp.container — deprecated internal implementation detail rejected by strict mode in v0.64.2+
smoke-codex.lock.yml: Recompiled with gh-aw v0.64.2
- Adds github.com, docs.github.com, github.blog, www.googleapis.com to --allow-domains (expanded github group)
- Updates MCP gateway image: v0.1.15 → v0.2.6
- Updates AWF container images: 0.24.1 → 0.25.1
- Adds --audit-dir flag and --mount for $RUNNER_TEMP/gh-aw

The old compiled domain list vs new:

-  ...,github.githubassets.com,host.docker.internal,...
+  ...,docs.github.com,...,github.blog,github.com,github.githubassets.com,host.docker.internal,...,www.googleapis.com'

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.64.2
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.64.2 --jq .object.sha unsafe-execa.js son tnet/tools/git (http block)
https://api.github.com/repos/github/gh-aw-firewall/actions/runs/23687387245/artifacts
- Triggering command: /usr/bin/gh gh run download 23687387245 -R github/gh-aw-firewall --name agent --dir /tmp/agent-artifact t.js (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Fix the failing GitHub Actions workflow agent
Analyze the workflow logs, identify the root cause of the failure, and implement a fix.
Job ID: 69009721978
Job URL: https://github.com/github/gh-aw-firewall/actions/runs/23687387245/job/69009721978

📍 Connect Copilot coding agent with Jira, Azure Boards or Linear to delegate work to Copilot in one click without leaving your project management tool.

…lowed domains

Copilot

Pull request overview

Updates the smoke-codex workflow to a newer gh-aw compiler version to unblock Codex runs inside the AWF sandbox (notably by expanding the firewall allowlist to include github.com and related domains) and to align with newer gh-aw runtime conventions.

Changes:

Recompiled smoke-codex.lock.yml with gh-aw v0.64.2 (new schema, updated images, expanded allowlist, adds --audit-dir + runner-temp mounts).
Removed deprecated sandbox.mcp.container frontmatter from smoke-codex.md.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/smoke-codex.md	Removes deprecated sandbox MCP container override from workflow manifest.
.github/workflows/smoke-codex.lock.yml	Regenerates compiled workflow with updated gh-aw/AWF/MCP gateway versions and expanded firewall allowlist.

Comments suppressed due to low confidence (2)

.github/workflows/smoke-codex.lock.yml:623

set-runtime-paths writes GH_AW_SAFE_OUTPUTS_* values to $GITHUB_OUTPUT, but the Start MCP Gateway step only sets GH_AW_SAFE_OUTPUTS. As a result, MCP_GATEWAY_DOCKER_COMMAND will pass empty GH_AW_SAFE_OUTPUTS_CONFIG_PATH / GH_AW_SAFE_OUTPUTS_TOOLS_PATH env vars into the gateway container. Set these two env vars on the Start MCP Gateway step (or export them via $GITHUB_ENV in set-runtime-paths) so the container receives the correct paths.

      - name: Start MCP Gateway
        id: start-mcp-gateway
        env:
          GH_AW_SAFE_OUTPUTS: ${{ steps.set-runtime-paths.outputs.GH_AW_SAFE_OUTPUTS }}
          GH_AW_SAFE_OUTPUTS_API_KEY: ${{ steps.safe-outputs-start.outputs.api_key }}
          GH_AW_SAFE_OUTPUTS_PORT: ${{ steps.safe-outputs-start.outputs.port }}
          GITHUB_MCP_GUARD_MIN_INTEGRITY: ${{ steps.determine-automatic-lockdown.outputs.min_integrity }}
          GITHUB_MCP_GUARD_REPOS: ${{ steps.determine-automatic-lockdown.outputs.repos }}
          GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}

.github/workflows/smoke-codex.lock.yml:603

Start Safe Outputs MCP HTTP Server sets port/key/tools/config env vars, but it does not set GH_AW_SAFE_OUTPUTS (the output NDJSON path). Since later steps expect safe outputs at ${RUNNER_TEMP}/gh-aw/safeoutputs/outputs.jsonl, consider passing GH_AW_SAFE_OUTPUTS: ${{ steps.set-runtime-paths.outputs.GH_AW_SAFE_OUTPUTS }} here as well so the server writes to the same location.

      - name: Start Safe Outputs MCP HTTP Server
        id: safe-outputs-start
        env:
          DEBUG: '*'
          GH_AW_SAFE_OUTPUTS_PORT: ${{ steps.safe-outputs-config.outputs.safe_outputs_port }}
          GH_AW_SAFE_OUTPUTS_API_KEY: ${{ steps.safe-outputs-config.outputs.safe_outputs_api_key }}
          GH_AW_SAFE_OUTPUTS_TOOLS_PATH: ${{ runner.temp }}/gh-aw/safeoutputs/tools.json
          GH_AW_SAFE_OUTPUTS_CONFIG_PATH: ${{ runner.temp }}/gh-aw/safeoutputs/config.json
          GH_AW_MCP_LOG_DIR: /tmp/gh-aw/mcp-logs/safeoutputs

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-03-28T15:33:58Z

.github/workflows/smoke-codex.lock.yml

+          echo "GH_AW_SAFE_OUTPUTS=${RUNNER_TEMP}/gh-aw/safeoutputs/outputs.jsonl" >> "$GITHUB_OUTPUT"
+          echo "GH_AW_SAFE_OUTPUTS_CONFIG_PATH=${RUNNER_TEMP}/gh-aw/safeoutputs/config.json" >> "$GITHUB_OUTPUT"
+          echo "GH_AW_SAFE_OUTPUTS_TOOLS_PATH=${RUNNER_TEMP}/gh-aw/safeoutputs/tools.json" >> "$GITHUB_OUTPUT"


set-runtime-paths currently writes GH_AW_SAFE_OUTPUTS (and related paths) only to $GITHUB_OUTPUT. Later shell steps (e.g., the safe-outputs validation post-step) won’t see these values unless they explicitly reference steps.set-runtime-paths.outputs.*, and will fall back to /opt/gh-aw/... paths that are no longer used. Consider also exporting these variables via $GITHUB_ENV so subsequent run: steps reliably pick them up.

This issue also appears in the following locations of the same file:

line 595

line 615

Suggested change

echo "GH_AW_SAFE_OUTPUTS=${RUNNER_TEMP}/gh-aw/safeoutputs/outputs.jsonl" >> "$GITHUB_OUTPUT"

echo "GH_AW_SAFE_OUTPUTS_CONFIG_PATH=${RUNNER_TEMP}/gh-aw/safeoutputs/config.json" >> "$GITHUB_OUTPUT"

echo "GH_AW_SAFE_OUTPUTS_TOOLS_PATH=${RUNNER_TEMP}/gh-aw/safeoutputs/tools.json" >> "$GITHUB_OUTPUT"

echo "GH_AW_SAFE_OUTPUTS=${RUNNER_TEMP}/gh-aw/safeoutputs/outputs.jsonl" >> "$GITHUB_OUTPUT"

echo "GH_AW_SAFE_OUTPUTS=${RUNNER_TEMP}/gh-aw/safeoutputs/outputs.jsonl" >> "$GITHUB_ENV"

echo "GH_AW_SAFE_OUTPUTS_CONFIG_PATH=${RUNNER_TEMP}/gh-aw/safeoutputs/config.json" >> "$GITHUB_OUTPUT"

echo "GH_AW_SAFE_OUTPUTS_CONFIG_PATH=${RUNNER_TEMP}/gh-aw/safeoutputs/config.json" >> "$GITHUB_ENV"

echo "GH_AW_SAFE_OUTPUTS_TOOLS_PATH=${RUNNER_TEMP}/gh-aw/safeoutputs/tools.json" >> "$GITHUB_OUTPUT"

echo "GH_AW_SAFE_OUTPUTS_TOOLS_PATH=${RUNNER_TEMP}/gh-aw/safeoutputs/tools.json" >> "$GITHUB_ENV"

…passthrough (#1482) * Initial plan * feat: add --exclude-env flag to exclude vars from --env-all passthrough Agent-Logs-Url: https://github.com/github/gh-aw-firewall/sessions/378a3ff5-6143-43d0-ad80-8d2866c010d5 * test: add GITHUB_TOKEN exclusion test for excludeEnv with envAll Agent-Logs-Url: https://github.com/github/gh-aw-firewall/sessions/378a3ff5-6143-43d0-ad80-8d2866c010d5 * fix: recompile smoke-codex workflow with gh-aw v0.64.2 to unblock github.com (#1483) * Initial plan * fix: recompile smoke-codex with gh-aw v0.64.2 to add github.com to allowed domains --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> * [WIP] Fix failing GitHub Actions workflow agent (#1484) * Initial plan * fix: postprocess regex to match gh-aw v0.64.2 install path Agent-Logs-Url: https://github.com/github/gh-aw-firewall/sessions/2fc9b7aa-85e8-4db2-99c3-53b5e7c5c9b9 --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

Initial plan

ad38eec

Copilot AI assigned Copilot and lpcox Mar 28, 2026

Copilot started work on behalf of lpcox March 28, 2026 14:56 View session

fix: recompile smoke-codex with gh-aw v0.64.2 to add github.com to al…

49874b2

…lowed domains

Copilot AI changed the title ~~[WIP] Fix the failing GitHub Actions workflow agent~~ fix: recompile smoke-codex workflow with gh-aw v0.64.2 to unblock github.com Mar 28, 2026

Copilot AI requested a review from lpcox March 28, 2026 15:24

Copilot finished work on behalf of lpcox March 28, 2026 15:24

lpcox marked this pull request as ready for review March 28, 2026 15:30

lpcox requested a review from Mossaka as a code owner March 28, 2026 15:30

Copilot AI review requested due to automatic review settings March 28, 2026 15:30

lpcox merged commit 0052a0a into copilot/fix-one-shot-token-list Mar 28, 2026

lpcox deleted the copilot/69009721978-fix-github-actions-workflow branch March 28, 2026 15:30

Copilot started reviewing on behalf of lpcox March 28, 2026 15:31 View session

Copilot AI reviewed Mar 28, 2026

View reviewed changes

github-actions bot mentioned this pull request Mar 28, 2026

feat: add --exclude-env flag to exclude specific vars from --env-all passthrough #1482

Merged

github-actions bot mentioned this pull request Mar 28, 2026

feat(api-proxy): add WebSocket upgrade support to fix Codex /v1/responses streaming #1486

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix: recompile smoke-codex workflow with gh-aw v0.64.2 to unblock github.com#1483

fix: recompile smoke-codex workflow with gh-aw v0.64.2 to unblock github.com#1483
lpcox merged 2 commits intocopilot/fix-one-shot-token-listfrom
copilot/69009721978-fix-github-actions-workflow

Copilot AI commented Mar 28, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Mar 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

Copilot AI commented Mar 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Mar 28, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Mar 28, 2026 •

edited

Loading