Remove local container build from smoke-copilot workflow

[lpcox]

Use standard GHCR image instead of building locally. Go setup retained for serena tool.

[Copilot]

Pull request overview

Updates the Smoke Copilot workflow to stop building an MCP Gateway container locally and instead rely on a prebuilt GHCR image, with the compiled lock workflow regenerated accordingly.

Changes:

• Removed Docker Buildx + local docker build steps from smoke-copilot.md.
• Regenerated smoke-copilot.lock.yml with a newer gh-aw compiler/action version, reflecting the removal of the local build step and other emitted workflow changes.
• Enabled failure reporting as issues in the compiled workflow (GH_AW_FAILURE_REPORT_AS_ISSUE: "true").

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/smoke-copilot.md	Removes local container build steps; continues to reference GHCR image for the sandbox MCP gateway.
.github/workflows/smoke-copilot.lock.yml	Regenerated workflow output (gh-aw v0.57.1), removing the build steps and introducing additional compiled-behavior changes.

Comments suppressed due to low confidence (1)

.github/workflows/smoke-copilot.lock.yml:898

• The compiled workflow no longer provisions any safe-inputs tools/servers (no safeinputs MCP server in mcpServers), but smoke-copilot.md and shared imports still instruct the agent to use safeinputs-gh, safeinputs-make, and github-*-query safe-input tools. This will likely cause the Copilot run to fail with “missing tool” errors. Either re-enable safe-inputs tool generation in the workflow compile output, or update the smoke test instructions/imports to use the actually available tools (e.g., bash/github MCP) and ensure gh authentication is covered.

          {
            "mcpServers": {
              "agenticworkflows": {
                "type": "stdio",
                "container": "alpine:latest",
                "entrypoint": "/opt/gh-aw/gh-aw",
                "entrypointArgs": ["mcp-server", "--validate-actor"],
                "mounts": ["/opt/gh-aw:/opt/gh-aw:ro", "/usr/bin/gh:/usr/bin/gh:ro", "\${GITHUB_WORKSPACE}:\${GITHUB_WORKSPACE}:rw", "/tmp/gh-aw:/tmp/gh-aw:rw"],
                "args": ["--network", "host", "-w", "\${GITHUB_WORKSPACE}"],
                "env": {
                  "DEBUG": "*",
                  "GITHUB_TOKEN": "\${GITHUB_TOKEN}",
                  "GITHUB_ACTOR": "\${GITHUB_ACTOR}",
                  "GITHUB_REPOSITORY": "\${GITHUB_REPOSITORY}"
                }
              },
              "github": {
                "type": "stdio",
                "container": "ghcr.io/github/github-mcp-server:v0.32.0",
                "env": {
                  "GITHUB_LOCKDOWN_MODE": "$GITHUB_MCP_LOCKDOWN",
                  "GITHUB_PERSONAL_ACCESS_TOKEN": "\${GITHUB_MCP_SERVER_TOKEN}",
                  "GITHUB_READ_ONLY": "1",
                  "GITHUB_TOOLSETS": "repos,pull_requests"
                }
              },
              "playwright": {
                "type": "stdio",
                "container": "mcr.microsoft.com/playwright/mcp",
                "args": ["--init", "--network", "host", "--security-opt", "seccomp=unconfined", "--ipc=host"],
                "entrypointArgs": ["--output-dir", "/tmp/gh-aw/mcp-logs/playwright", "--no-sandbox"],
                "mounts": ["/tmp/gh-aw/mcp-logs:/tmp/gh-aw/mcp-logs:rw"]
              },
              "safeoutputs": {
                "type": "http",
                "url": "http://host.docker.internal:$GH_AW_SAFE_OUTPUTS_PORT",
                "headers": {
                  "Authorization": "\${GH_AW_SAFE_OUTPUTS_API_KEY}"
                }
              },
              "serena": {
                "type": "stdio",
                "container": "ghcr.io/github/serena-mcp-server:latest",
                "args": ["--network", "host"],
                "entrypoint": "serena",
                "entrypointArgs": ["start-mcp-server", "--context", "codex", "--project", "\${GITHUB_WORKSPACE}"],
                "mounts": ["\${GITHUB_WORKSPACE}:\${GITHUB_WORKSPACE}:rw"]
              }
            },

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

This PR changes workflow behavior beyond “remove local container build”: it bumps the gh-aw compiler/action version and enables GH_AW_FAILURE_REPORT_AS_ISSUE. Please confirm this behavior change is intended and update the PR description accordingly (or revert if out of scope).