You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Excessive Tool Denials: The Copilot SDK hit the max tool denial guardrail and stopped the session early (5/5).
Last denied request
shell(# Check if there's a pre-downloaded binary cache elsewhere
find / -name "gopkg.in" -type d 2>/dev/null | grep -v "runner/go/pkg/mod" | head -5
# Check if go.sum has what we need
ls /home/runner/work/gh-aw/gh-aw/go.sum | head
# Check if we can use GOPATH that was pre-populated
ls /root/go 2>/dev/null | head -5)
bash(ls /home/runner/go/pkg/mod/cache/download/charm.land/lipgloss/v2/@v/ ls /home/runner/go/pkg/mod/cache/download/gopkg....)
bash(# Check if gosum database is available ls /home/runner/go/pkg/mod/cache/download/sumdb/ 2>/dev/null | head -5 # Check...)
bash(find /home/runner/go/pkg/mod -type d -maxdepth 3 2>/dev/null | head -20)
bash(# Check if there's a pre-downloaded binary cache elsewhere find / -name "gopkg.in" -type d 2>/dev/null | grep -v "run...)
This is a structured guardrail event (guard.tool_denials_exceeded) captured in events.jsonl.
How to fix this
The prompt attempted actions outside the workflow's allowed tools.
Update the workflow prompt and/or permissions so required actions are permitted:
The workflow daily-safe-output-integrator stopped because the Copilot SDK exceeded its tool denial threshold (5/5).
Last denied request:
shell(# Check if there's a pre-downloaded binary cache elsewhere
find / -name "gopkg.in" -type d 2>/dev/null | grep -v "runner/go/pkg/mod" | head -5
# Check if go.sum has what we need
ls /home/runner/work/gh-aw/gh-aw/go.sum | head
# Check if we can use GOPATH that was pre-populated
ls /root/go 2>/dev/null | head -5)
Please update the workflow so the prompt only uses tools permitted by the workflow tool policy.
Action Required
Assign this issue to an agent to debug and fix the issue.
Optimize token consumption
This failure was triggered by a guardrail limit (max-tool-denials). Use this prompt with any coding agent (GitHub Copilot, Claude, Gemini, etc.) to analyze token usage and reduce costs:
Optimize the agentic workflow token consumption using https://raw.githubusercontent.com/github/gh-aw/main/optimize.md
The workflow run is at https://github.com/github/gh-aw/actions/runs/28259715324
Debug with any coding agent
Use this prompt with any coding agent (GitHub Copilot, Claude, Gemini, etc.):
Debug the agentic workflow failure using https://raw.githubusercontent.com/github/gh-aw/main/debug.md
The failed workflow run is at https://github.com/github/gh-aw/actions/runs/28259715324
Manually invoke the agent
Debug this workflow failure using your favorite Agent CLI and the agentic-workflows prompt.
Workflow Failure
Workflow: Daily Safe Output Integrator
Branch: main
Run: https://github.com/github/gh-aw/actions/runs/28259715324
Warning
Excessive Tool Denials: The Copilot SDK hit the max tool denial guardrail and stopped the session early (
5/5).Last denied request
Last 5 tool calls
bash(grep -A5 "^test-unit:" /home/runner/work/gh-aw/gh-aw/Makefile)bash(ls /home/runner/go/pkg/mod/cache/download/charm.land/lipgloss/v2/@v/ ls /home/runner/go/pkg/mod/cache/download/gopkg....)bash(# Check if gosum database is available ls /home/runner/go/pkg/mod/cache/download/sumdb/ 2>/dev/null | head -5 # Check...)bash(find /home/runner/go/pkg/mod -type d -maxdepth 3 2>/dev/null | head -20)bash(# Check if there's a pre-downloaded binary cache elsewhere find / -name "gopkg.in" -type d 2>/dev/null | grep -v "run...)This is a structured guardrail event (
guard.tool_denials_exceeded) captured inevents.jsonl.How to fix this
The prompt attempted actions outside the workflow's allowed tools.
Update the workflow prompt and/or permissions so required actions are permitted:
Action Required
Assign this issue to an agent to debug and fix the issue.
Optimize token consumption
This failure was triggered by a guardrail limit (max-tool-denials). Use this prompt with any coding agent (GitHub Copilot, Claude, Gemini, etc.) to analyze token usage and reduce costs:
Debug with any coding agent
Use this prompt with any coding agent (GitHub Copilot, Claude, Gemini, etc.):
Manually invoke the agent
Debug this workflow failure using your favorite Agent CLI and the
agentic-workflowsprompt.agentic-workflowsskill from.github/skills/agentic-workflows/SKILL.mdor https://github.com/github/gh-aw/blob/main/.github/skills/agentic-workflows/SKILL.mddebug the agentic workflow daily-safe-output-integrator failure in https://github.com/github/gh-aw/actions/runs/28259715324Tip
Stop reporting this workflow as a failure
To stop a workflow from creating failure issues, set
report-failure-as-issue: falsein its frontmatter: