chore: recompile workflows with compiler 5a10da88 + fix raw-IP allow rules#6230
Merged
Conversation
Recompiled all 57 workflows using: gh-aw compile --gh-aw-ref 5a10da8811ff76f3a1110e8971c716f22ba9c905 This compiler version includes fixes for docker-sbx runtime: - Suppress --tty for docker-sbx (fixes sbx exec pty deadline) - Install CLI binaries into sbx-accessible path - Set agentTimeout in AWF config for docker-sbx Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8dcc99fc-3d0e-40c5-8b75-bc43d9bf5dee
This was referenced Jul 14, 2026
The released AWF v0.27.31 images don't include the /dev/null:rw mount and capsh PATH fixes needed for gVisor. Build from source until the next AWF release includes these fixes. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8dcc99fc-3d0e-40c5-8b75-bc43d9bf5dee
Contributor
There was a problem hiding this comment.
Pull request overview
Recompiles generated workflows with gh-aw compiler 5a10da88, incorporating docker-sbx runtime fixes.
Changes:
- Refreshes compiler and setup-action references.
- Adds docker-sbx CLI-path handling, timeout configuration, and TTY suppression.
- Regenerates AWF/container pins, including a problematic rollback to v0.27.31.
Show a summary per file
| File | Description |
|---|---|
.github/workflows/agentics-maintenance.yml |
Updates maintenance setup references. |
.github/workflows/build-test-network-isolation.lock.yml |
Refreshes generated setup references. |
.github/workflows/build-test.lock.yml |
Recompiles build-test workflow. |
.github/workflows/ci-cd-gaps-assessment.lock.yml |
Recompiles CI gap assessment. |
.github/workflows/ci-doctor.lock.yml |
Recompiles CI doctor workflow. |
.github/workflows/claude-token-optimizer.lock.yml |
Recompiles Claude optimizer. |
.github/workflows/claude-token-usage-analyzer.lock.yml |
Recompiles Claude usage analyzer. |
.github/workflows/cli-flag-consistency-checker.lock.yml |
Recompiles CLI consistency checks. |
.github/workflows/config-consistency-auditor.lock.yml |
Recompiles configuration auditor. |
.github/workflows/contribution-check.lock.yml |
Recompiles contribution checks. |
.github/workflows/copilot-token-optimizer.lock.yml |
Recompiles Copilot optimizer. |
.github/workflows/copilot-token-usage-analyzer.lock.yml |
Recompiles Copilot usage analyzer. |
.github/workflows/dependency-security-monitor.lock.yml |
Recompiles dependency monitor. |
.github/workflows/doc-maintainer.lock.yml |
Recompiles documentation maintainer. |
.github/workflows/duplicate-code-detector.lock.yml |
Recompiles duplicate-code detector. |
.github/workflows/export-audit.lock.yml |
Recompiles audit export workflow. |
.github/workflows/firewall-issue-dispatcher.lock.yml |
Recompiles issue dispatcher. |
.github/workflows/issue-duplication-detector.lock.yml |
Recompiles issue-duplication detector. |
.github/workflows/issue-monster.lock.yml |
Recompiles issue automation. |
.github/workflows/model-api-mapping-updater.lock.yml |
Recompiles model-mapping updater. |
.github/workflows/network-isolation-test.lock.yml |
Refreshes isolation-test setup references. |
.github/workflows/pelis-agent-factory-advisor.lock.yml |
Recompiles advisor and setup-cli references. |
.github/workflows/plan.lock.yml |
Recompiles planning workflow. |
.github/workflows/red-team-benchmark.lock.yml |
Recompiles red-team benchmark. |
.github/workflows/refactoring-scanner.lock.yml |
Recompiles refactoring scanner. |
.github/workflows/schema-sync.lock.yml |
Recompiles schema synchronization. |
.github/workflows/secret-digger-claude.lock.yml |
Recompiles Claude secret scanner. |
.github/workflows/secret-digger-codex.lock.yml |
Recompiles Codex secret scanner. |
.github/workflows/secret-digger-copilot.lock.yml |
Recompiles Copilot secret scanner. |
.github/workflows/security-guard.lock.yml |
Recompiles security guard. |
.github/workflows/security-review.lock.yml |
Recompiles strict security review. |
.github/workflows/self-hosted-runner-doctor-updater.lock.yml |
Recompiles doctor updater. |
.github/workflows/self-hosted-runner-doctor.lock.yml |
Recompiles runner doctor. |
.github/workflows/smoke-chroot.lock.yml |
Recompiles chroot smoke test. |
.github/workflows/smoke-claude.lock.yml |
Recompiles Claude smoke test. |
.github/workflows/smoke-codex.lock.yml |
Recompiles Codex smoke test. |
.github/workflows/smoke-copilot-byok-aoai-apikey.lock.yml |
Recompiles AOAI API-key smoke test. |
.github/workflows/smoke-copilot-byok-aoai-entra.lock.yml |
Recompiles AOAI Entra smoke test. |
.github/workflows/smoke-copilot-byok.lock.yml |
Recompiles BYOK smoke test. |
.github/workflows/smoke-copilot-pat.lock.yml |
Recompiles PAT smoke test. |
.github/workflows/smoke-copilot.lock.yml |
Recompiles Copilot smoke test. |
.github/workflows/smoke-docker-sbx-build-test.lock.yml |
Adds docker-sbx timeout/runtime fixes. |
.github/workflows/smoke-docker-sbx-claude.lock.yml |
Adds sbx-accessible Claude installation. |
.github/workflows/smoke-docker-sbx-codex.lock.yml |
Adds sbx-accessible Codex installation. |
.github/workflows/smoke-docker-sbx.lock.yml |
Adds docker-sbx timeout/runtime fixes. |
.github/workflows/smoke-gemini.lock.yml |
Recompiles Gemini smoke test. |
.github/workflows/smoke-gvisor-build-test.lock.yml |
Replaces source build with released AWF. |
.github/workflows/smoke-gvisor-claude.lock.yml |
Replaces source build with released AWF. |
.github/workflows/smoke-gvisor-codex.lock.yml |
Replaces source build with released AWF. |
.github/workflows/smoke-gvisor.lock.yml |
Replaces source build with released AWF. |
.github/workflows/smoke-otel-tracing.lock.yml |
Recompiles OTEL smoke test. |
.github/workflows/smoke-services.lock.yml |
Recompiles services smoke test. |
.github/workflows/smoke-sink-visibility-allowed.lock.yml |
Recompiles allowed-sink smoke test. |
.github/workflows/smoke-sink-visibility-blocked.lock.yml |
Recompiles blocked-sink smoke test. |
.github/workflows/test-coverage-improver.lock.yml |
Recompiles coverage improver. |
.github/workflows/test-coverage-reporter.lock.yml |
Recompiles coverage reporter. |
.github/workflows/test-hard-cap-ai-credits.lock.yml |
Recompiles AI-credit cap test. |
.github/workflows/update-release-notes.lock.yml |
Recompiles release-notes updater. |
Review details
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 40/58 changed files
- Comments generated: 5
- Review effort level: Medium
| docker build -t ghcr.io/github/gh-aw-firewall/agent:0.27.32 containers/agent/ | ||
| docker build -t ghcr.io/github/gh-aw-firewall/squid:0.27.32 containers/squid/ | ||
| docker build -t ghcr.io/github/gh-aw-firewall/api-proxy:0.27.32 containers/api-proxy/ | ||
| run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.31 |
| docker build -t ghcr.io/github/gh-aw-firewall/agent:0.27.32 containers/agent/ | ||
| docker build -t ghcr.io/github/gh-aw-firewall/squid:0.27.32 containers/squid/ | ||
| docker build -t ghcr.io/github/gh-aw-firewall/api-proxy:0.27.32 containers/api-proxy/ | ||
| run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.31 |
| docker build -t ghcr.io/github/gh-aw-firewall/agent:0.27.32 containers/agent/ | ||
| docker build -t ghcr.io/github/gh-aw-firewall/squid:0.27.32 containers/squid/ | ||
| docker build -t ghcr.io/github/gh-aw-firewall/api-proxy:0.27.32 containers/api-proxy/ | ||
| run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.31 |
| docker build -t ghcr.io/github/gh-aw-firewall/agent:0.27.32 containers/agent/ | ||
| docker build -t ghcr.io/github/gh-aw-firewall/squid:0.27.32 containers/squid/ | ||
| docker build -t ghcr.io/github/gh-aw-firewall/api-proxy:0.27.32 containers/api-proxy/ | ||
| run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.31 |
| GH_HOST: github.com | ||
| - name: Install AWF binary | ||
| run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.32 --rootless | ||
| run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.31 --rootless |
When building AWF from source, Docker images are tagged without digest pins (e.g., agent:0.27.31). The compiler-generated imageTag includes digest pins (agent=sha256:...) which Docker can't match against locally-built images. Strip the pins so docker compose finds them. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8dcc99fc-3d0e-40c5-8b75-bc43d9bf5dee
Contributor
|
✅ Copilot review passed with no inline comments. @lpcox Add the |
When a raw IP address (e.g. 172.30.0.1 for the MCP gateway) is in --allow-domains, Squid's blanket raw-IP deny rule (dst_ipv4) fires before the domain ACL, causing a 403. This adds dst-based allow rules for any IPv4 addresses in the allowed domains list, inserted before the raw-IP deny — matching the existing api-proxy carve-out pattern. Root cause: Codex uses HTTP-based MCP transport to reach the MCP gateway at 172.30.0.1:8080. The request goes through Squid via HTTP_PROXY, where it matches the dst_ipv4 regex and gets denied before the domain ACL evaluates. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8dcc99fc-3d0e-40c5-8b75-bc43d9bf5dee
…y workflows All 7 sbx/gvisor workflows now trigger on both their dedicated label (e.g. test-gvisor) AND the ready-for-aw label. Sink-visibility workflows gain pull_request trigger with ready-for-aw label gate. This ensures all strict-security smoke tests run as part of the standard ready-for-aw CI suite alongside existing smoke tests. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8dcc99fc-3d0e-40c5-8b75-bc43d9bf5dee
lpcox
changed the title
lpcox
enabled auto-merge (squash)
July 14, 2026 23:12
lpcox
disabled auto-merge
July 14, 2026 23:12
Collaborator
Author
|
@copilot merge main |
Contributor
The branch is already up to date with |
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8dcc99fc-3d0e-40c5-8b75-bc43d9bf5dee
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Recompiled all 57 workflows using the latest compiler build:
Compiler Changes Included
This compiler version (
5a10da88) includes fixes from github/gh-aw#45553 for docker-sbx runtime support:--ttyfor docker-sbx —sbx exec --ttyimposes an internal ~30s pty deadline that kills long-running agents/usr/local/bin/is invisible inside the sbx microVMagentTimeoutin AWF config — safety net timeout for docker-sbx workflowsChanges
.lock.ymlfiles recompiled)Testing
The individual fixes were already verified green in CI on the previous PR (#6223):
smoke-docker-sbx-codex(run 29363947056)smoke-docker-sbx-claude(run 29365504068)This PR verifies the compiler produces equivalent output without manual lockfile edits.