fix: patch vulnerable gRPC in GitHub CLI images by github-actions[bot] · Pull Request #7997 · github/gh-aw-firewall

github-actions · 2026-09-02T03:31:19Z

Summary

Patch the GitHub CLI source build in the agent and CLI proxy images to use google.golang.org/grpc v1.83.1.
Verify at image-build time that the resulting gh binary embeds the fixed module version.
Resolve the original auth documentation update against current main, where the provider registry documentation is already current.

This fixes the blocking Grype finding for GHSA-vp52-pcj8-j9qc / CVE-2026-84304.

Validation

Built both gh-build Docker stages successfully.
Confirmed each build upgrades gRPC from v1.82.1 to v1.83.1 and passes the embedded-module assertion.

PR #7954 refactored Gemini/Vertex to share makeGoogleProviderFactory() instead of directly sharing createGoogleApiKeyAdapter. Update the auth-matrix implementation note to match current main. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot

🟢 Approval recommended

The documentation accurately reflects the verified Gemini and Vertex adapter implementations.

Pull request overview

Updates authentication documentation to match the shared Google provider factory introduced in #7954.

Changes:

Corrects the Vertex AI implementation note.
Documents that both Vertex and Gemini use makeGoogleProviderFactory.

File summaries

File	Description
`docs/auth-matrix.md`	Aligns Vertex adapter documentation with current implementation.

Review details

Files reviewed: 1/1 changed files
Comments generated: 0
Review effort level: Balanced

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

github-actions · 2026-09-02T13:50:21Z

✅ Copilot review passed with no inline comments.

@github-actions[bot] Add the ready-for-aw label to this PR to trigger agentic CI smoke tests.

github-actions · 2026-09-02T13:50:35Z

Documentation Preview

Documentation build failed for this PR. View logs.

Built from commit 866aff4

Override GitHub CLI's vulnerable gRPC dependency in both images. Verify the fixed module version is embedded in each resulting binary. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 21b0cf92-6035-4af9-8570-f84d0dff9ed1

Keep the current declarative Google provider documentation while retaining the gRPC image fix. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 21b0cf92-6035-4af9-8570-f84d0dff9ed1

github-actions · 2026-09-02T15:03:44Z

✅ Security Guard completed successfully!

PR #7997 security review complete. No security issues found. Changes patch a vulnerable gRPC dependency in GitHub CLI Dockerfiles with verification step. No firewall rules weakened, no capabilities added, no allowlist expansion. PR passes security review.

Generated by Security Guard for #7997

github-actions · 2026-09-02T15:03:45Z

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

Tested by Smoke Chroot

github-actions · 2026-09-02T15:03:45Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

📰 BREAKING: Report filed by Smoke Copilot

github-actions · 2026-09-02T15:03:45Z

🔌 Smoke Services — All services reachable! ✅

🔌 Service connectivity validated by Smoke Services

github-actions · 2026-09-02T15:03:46Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

msfeed25.pkgs.visualstudio.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "msfeed25.pkgs.visualstudio.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex

github-actions · 2026-09-02T15:03:47Z

✅ Smoke Copilot BYOK AOAI (api-key) completed. Copilot AOAI BYOK (api-key) mode operational. 🔓

🔑 BYOK (AOAI api-key) report filed by Smoke Copilot BYOK AOAI (api-key)

github-actions · 2026-09-02T15:03:51Z

🛡️ Smoke Copilot Network Isolation confirmed the egress allowlist is enforced. ✅

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

example.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "example.com"

See Network Configuration for more information.

🛡️ Egress verdict from Smoke Copilot Network Isolation

github-actions · 2026-09-02T15:03:51Z

✅ Contribution Check completed successfully!

No contribution-guideline issues found in PR #7997. The description is clear and references the fix, the change is in the correct container directories, and it includes validation notes; no additional comment was needed.

Generated by Contribution Check for #7997

github-actions · 2026-09-02T15:03:51Z

📡 Smoke OTel Tracing completed. All tracing scenarios validated. ✅

📡 OTel tracing validated by Smoke OTel Tracing

github-actions · 2026-09-02T15:03:59Z

✅ Smoke Copilot BYOK AOAI (Entra) completed. Copilot AOAI BYOK (Entra) mode operational. 🔓

🪪 BYOK (AOAI Entra) report filed by Smoke Copilot BYOK AOAI (Entra)

github-actions · 2026-09-02T15:04:00Z

✅ Build Test Suite completed successfully!

Generated by Build Test Suite for #7997

github-actions · 2026-09-02T15:04:04Z

✅ Smoke Claude passed

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.anthropic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.anthropic.com"

See Network Configuration for more information.

Generated by Smoke Claude for #7997

github-actions · 2026-09-02T15:04:12Z

✅ Smoke Copilot BYOK completed. Copilot BYOK mode operational. 🔓

🔑 BYOK report filed by Smoke Copilot BYOK

github-actions · 2026-09-02T15:04:18Z

📰 VERDICT: Smoke Docker Sbx has concluded. All systems operational. This is a developing story. 🎤

📰 BREAKING: Report filed by Smoke Docker Sbx

github-actions · 2026-09-02T15:04:28Z

❌ Smoke Gemini reports failed. Facets need polishing...

💎 Faceted by Smoke Gemini

github-actions · 2026-09-02T15:07:05Z

EGRESS_RESULT allow=pass deny=pass

✅ Allowed domain (github.com) reachable: allowed=200
✅ Blocked domain (example.com) denied: CONNECT tunnel failed, 403

Overall status: PASS

@lpcox

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

example.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "example.com"

See Network Configuration for more information.

🛡️ Egress verdict from Smoke Copilot Network Isolation
_{Add label ready-for-aw to run again}

github-actions · 2026-09-02T15:07:23Z

Smoke Test: Claude Engine Validation

Check	Result
API status	✅ PASS
`gh` check	✅ PASS
File status	✅ PASS

Overall result: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.anthropic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.anthropic.com"

See Network Configuration for more information.

Generated by Smoke Claude for #7997 · claude · haiku45 · 58.3 AIC · ⊞ 4.5K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-09-02T15:07:40Z

Copilot Engine Smoke Test

PR Connect agent enclaves directly to shared GitHub MCP #7991: Connect agent enclaves directly to shared GitHub MCP
PR Refactor Google API-key provider factories #7990: Refactor Google API-key provider factories

Results:

✅ GitHub MCP connectivity
✅ GitHub.com connectivity (HTTP 200)
✅ File write/read test

Overall: PASS

@lpcox

📰 BREAKING: Report filed by Smoke Copilot
_{Add label ready-for-aw to run again}

github-actions · 2026-09-02T15:07:46Z

Smoke Test: API Proxy OTEL Tracing — Results

✅ Scenario 1 (Module Loading): otel.js loads successfully, exports startRequestSpan, setTokenAttributes, setBudgetAttributes, endSpan, endSpanError, shutdown, isEnabled, plus internal exporter classes.
✅ Scenario 2 (Test Suite): 3 suites passed (otel.test.js, otel-fanout.test.js, otel-workload-identity.test.js) — 68/68 tests passed.
✅ Scenario 3 (Env Var Forwarding): env-passthrough.ts forwards GITHUB_AW_OTEL_TRACE_ID/GITHUB_AW_OTEL_PARENT_SPAN_ID (+ COPILOT_OTEL_FILE_EXPORTER_PATH) to the agent; api-proxy-env-config.ts forwards OTEL_EXPORTER_OTLP_ENDPOINT, OTEL_EXPORTER_OTLP_HEADERS, trace/parent-span IDs, and OTEL_SERVICE_NAME to the api-proxy container.
✅ Scenario 4 (Token Tracker Integration): onUsage callback confirmed present in token-tracker-http.js (invoked after normalized usage extraction) as the OTEL hook point.
⚠️ Scenario 5 (OTEL Diagnostics): Not independently verified in this session (no live diagnostics step output available to inspect); code paths for OTLP export are present and covered by unit tests, but no spans were confirmed exported during this run.

Overall: 4/5 scenarios passed directly; 1 pending live-run diagnostics confirmation (expected/non-blocking).

📡 OTel tracing validated by Smoke OTel Tracing
_{Add label ready-for-aw to run again}

github-actions · 2026-09-02T15:07:58Z

Smoke Test Results: FAIL ❌

Redis PING: ❌ Temporary failure in name resolution
PostgreSQL pg_isready: ❌ no response
PostgreSQL SELECT 1: ❌ could not translate host name "host.docker.internal"

Overall: FAIL — host.docker.internal did not resolve inside the AWF sandbox; no connectivity to host service containers was established.

🔌 Service connectivity validated by Smoke Services
_{Add label ready-for-aw to run again}

github-actions · 2026-09-02T15:08:13Z

Smoke Test: Docker Sbx — cc @github-actions[bot]

✅ GitHub MCP connectivity (live query succeeded; differs from stale pre-fetched sample)
✅ GitHub.com connectivity (HTTP 200)
✅ File write/read test passed

Overall: PASS

📰 BREAKING: Report filed by Smoke Docker Sbx
_{Add label ready-for-aw to run again}

github-actions · 2026-09-02T15:08:14Z

Smoke Test: Copilot BYOK (Direct) Mode — PASS

✅ GitHub MCP connectivity
✅ GitHub.com HTTP 200
✅ File write/read test
✅ BYOK inference (api-proxy → api.githubcopilot.com)

Running in direct BYOK mode via COPILOT_PROVIDER_API_KEY.

🔑 BYOK report filed by Smoke Copilot BYOK
_{Add label ready-for-aw to run again}

github-actions · 2026-09-02T15:08:50Z

PR titles: unavailable (required GitHub read tools missing)
GitHub MCP review: ❌
safeinputs-gh PR query: ❌
Playwright title check: ✅
File write/read: ✅
Discussion query/comment: ❌
AWF build: ✅
Overall: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

msfeed25.pkgs.visualstudio.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "msfeed25.pkgs.visualstudio.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex
_{Add label ready-for-aw to run again}

github-actions · 2026-09-02T15:08:52Z

Chroot Version Comparison

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.14	Python 3.12.14	✅ YES
Node.js	v24.19.0	v22.23.2	❌ NO
Go	go1.22.12	go1.22.12	✅ YES

Result: Not all tests passed — Node.js version mismatch between host and chroot environment. smoke-chroot label not applied.

Tested by Smoke Chroot
_{Add label ready-for-aw to run again}

github-actions · 2026-09-02T15:10:14Z

@github-actions[bot]
Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw)
Connect agent enclaves directly to shared GitHub MCP ❌
Refactor Google API-key provider factories ❌
GitHub.com connectivity ✅
Agent file I/O ✅
BYOK inference ✅
Overall: FAIL

🔑 BYOK (AOAI api-key) report filed by Smoke Copilot BYOK AOAI (api-key)
_{Add label ready-for-aw to run again}

github-actions · 2026-09-02T15:10:37Z

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A (run OK)	✅ PASS
.NET	json-parse	✅	N/A (run OK)	✅ PASS
Go	color	✅	ok	✅ PASS
Go	env	✅	ok	✅ PASS
Go	uuid	✅	ok	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	all passed	✅ PASS
Node.js	execa	✅	all passed	✅ PASS
Node.js	p-limit	✅	all passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — PASS

Note: Java builds required overriding the local Maven repository (-Dmaven.repo.local=/tmp/...) because ~/.m2 was not writable by the runner user; the settings.xml proxy config worked as expected.

Generated by Build Test Suite for #7997 · copilot · auto · 44.2 AIC · ⊞ 12K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-09-02T15:14:27Z

Connect agent enclaves directly to shared GitHub MCP: ✅
Refactor Google API-key provider factories: ✅
GitHub.com connectivity: ✅
File write/read test: ✅
Direct BYOK inference: ✅

Running in direct BYOK mode (AWF_AUTH_TYPE=github-oidc + AWF_AUTH_AZURE_* + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw) authenticated via Microsoft Entra

Overall: PASS

@github-actions[bot]

🪪 BYOK (AOAI Entra) report filed by Smoke Copilot BYOK AOAI (Entra)
_{Add label ready-for-aw to run again}

github-actions Bot added ai-generated documentation Improvements or additions to documentation labels Sep 2, 2026

lpcox requested a balanced review from Copilot September 2, 2026 13:44

Copilot started reviewing on behalf of lpcox September 2, 2026 13:45 View session

Copilot AI reviewed Sep 2, 2026

View reviewed changes

lpcox changed the title ~~[docs] auth: correct Gemini/Vertex adapter factory sharing in auth-matrix~~ fix: patch vulnerable gRPC in GitHub CLI images Sep 2, 2026

Merge main into PR branch

2762034

Keep the current declarative Google provider documentation while retaining the gRPC image fix. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 21b0cf92-6035-4af9-8570-f84d0dff9ed1

lpcox added the ready-for-aw label Sep 2, 2026

lpcox temporarily deployed to aoai-model September 2, 2026 15:04 — with GitHub Actions Inactive

github-actions Bot added the smoke-copilot-network-isolation Copilot network-isolation egress smoke test label Sep 2, 2026

github-actions Bot added the smoke-claude label Sep 2, 2026

github-actions Bot added the smoke-copilot label Sep 2, 2026

github-actions Bot added the smoke-copilot-byok label Sep 2, 2026

github-actions Bot added the smoke-docker-sbx label Sep 2, 2026

github-actions Bot added the build-test label Sep 2, 2026

lpcox temporarily deployed to aoai-model September 2, 2026 15:13 — with GitHub Actions Inactive

github-actions Bot added the smoke-copilot-byok-aoai-entra label Sep 2, 2026

lpcox temporarily deployed to aoai-model September 2, 2026 15:14 — with GitHub Actions Inactive

lpcox merged commit 3d4313b into main Sep 2, 2026
179 of 181 checks passed

lpcox deleted the docs/auth-doctor-2026-09-02-88319811-1133899a991a3d3e branch September 2, 2026 15:18

This was referenced Sep 2, 2026

Fix arc-dind /dev/null credential overlay EROFS crash with --docker-host-path-prefix #7998

Merged

chore: update model-to-API mapping (2026-09-02) #8001

Merged

Uh oh!

Conversation

github-actions Bot commented Sep 2, 2026 • edited by lpcox Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Validation

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟢 Approval recommended

Uh oh!

github-actions Bot commented Sep 2, 2026

Uh oh!

github-actions Bot commented Sep 2, 2026

Documentation Preview

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 2, 2026

Uh oh!

github-actions Bot commented Sep 2, 2026

Smoke Test: Claude Engine Validation

Uh oh!

github-actions Bot commented Sep 2, 2026

Copilot Engine Smoke Test

Uh oh!

github-actions Bot commented Sep 2, 2026

Uh oh!

github-actions Bot commented Sep 2, 2026

Smoke Test Results: FAIL ❌

Uh oh!

github-actions Bot commented Sep 2, 2026

Uh oh!

github-actions Bot commented Sep 2, 2026

Uh oh!

github-actions Bot commented Sep 2, 2026

Uh oh!

github-actions Bot commented Sep 2, 2026 •

edited by lpcox

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 2, 2026 •

edited

Loading