[q] Allow releaseassets.githubusercontent.com in daily-sentrux-report

[github-actions]

Q Workflow Optimization Report

Issue Found

The daily-sentrux-report workflow was blocked from downloading sentrux language grammar plugins because releaseassets.githubusercontent.com was not in the network.allowed list.

This was reported in discussion #29129:

Firewall blocked 1 domain: releaseassets.githubusercontent.com

As a result, sentrux could not perform deep structural analysis (import/call graphs), causing all per-metric scores to default to zero.

Change Made

Added network.allowed section to .github/workflows/daily-sentrux-report.md:

network:
  allowed:
    - defaults
    - "releaseassets.githubusercontent.com"

Expected Improvement

Sentrux will be able to download language grammars and perform proper import/call/inheritance graph analysis, yielding meaningful per-metric quality scores.

Validation

✅ daily-sentrux-report compiled successfully with no errors or warnings.

Note: .lock.yml will be regenerated automatically after merge.

---

Warning

Protected Files — Push Permission Denied

This was originally intended as a pull request, but the patch modifies protected files. A human must create the pull request manually.

Protected files

• .github/workflows/daily-sentrux-report.md

The push was rejected because GitHub Actions does not have workflows permission to push these changes, and is never allowed to make such changes, or other authorization being used does not have this permission.

Create the pull request manually

# Download the patch from the workflow run
gh run download 25114771205 -n agent -D /tmp/agent-25114771205

# Create a new branch
git checkout -b q/allow-releaseassets-githubusercontent-com-07f87a74f81007e9 main

# Apply the patch (--3way handles cross-repo patches)
git am --3way /tmp/agent-25114771205/aw-q-allow-releaseassets-githubusercontent-com.patch

# Push the branch and create the pull request
git push origin q/allow-releaseassets-githubusercontent-com-07f87a74f81007e9
gh pr create --title '[q] Allow releaseassets.githubusercontent.com in daily-sentrux-report' --base main --head q/allow-releaseassets-githubusercontent-com-07f87a74f81007e9 --repo github/gh-aw

🎩 Equipped by Q · ● 698.4K · ◷

• expires on May 1, 2026, 2:33 PM UTC