Fix runtime loading for add-reviewer and 4 other safe-output handlers by Copilot · Pull Request #16688 · github/gh-aw

Copilot · 2026-02-19T00:38:59Z

Five safe-output handlers (add_reviewer, assign_milestone, mark_pull_request_as_ready_for_review, create_code_scanning_alert, create_agent_session) were being skipped at runtime with "No handler loaded" warnings despite successful compilation.

Root Cause

The handlerRegistry in pkg/workflow/compiler_safe_outputs_config.go builds the GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG environment variable that the JavaScript unified handler manager reads at runtime. These 5 handlers had JavaScript implementations and were listed in HANDLER_MAP, but their Go-side configuration builders were missing from the registry.

Changes

Added configuration builders for the missing handlers:

"add_reviewer": func(cfg *SafeOutputsConfig) map[string]any {
    if cfg.AddReviewer == nil {
        return nil
    }
    c := cfg.AddReviewer
    return newHandlerConfigBuilder().
        AddIfPositive("max", c.Max).
        AddStringSlice("allowed", c.Reviewers).
        AddIfNotEmpty("target", c.Target).
        AddIfNotEmpty("target-repo", c.TargetRepoSlug).
        AddStringSlice("allowed_repos", c.AllowedRepos).
        Build()
},

Similar builders added for:

assign_milestone - milestone assignment with allowlist
mark_pull_request_as_ready_for_review - PR state management with label/title filtering
create_code_scanning_alert - security alert creation with driver config
create_agent_session - agent session creation with base branch and cross-repo support

Impact

Handler configurations are now included in the runtime environment variable:

Before:

⚠️ No handler loaded for message type 'add_reviewer' (message 8/11)

After:

GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"add_reviewer\":{\"allowed\":[\"copilot\"],\"max\":3,\"target\":\"*\"},...}"

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw GOMOD GOMODCACHE go m/_n�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw GOMOD erignore go env -json GO111MODULE 64/bin/go GOINSECURE 639325f3b2376554-V=full GOMODCACHE go (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/11bd71901bbe5b1630ceea73d27597364c9af683
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/11bd71901bbe5b1630ceea73d27597364c9af683 --jq .object.sha npx prettier --cremote.origin.url GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go node /hom�� --check scripts/**/*.js 64/bin/go -d -trimpath 64/bin/go go (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha g_.a --verbose (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha graphql -f 0/x64/bin/node -f owner=github DiscussionsEnabl--show-toplevel /usr/bin/unpigz t-ha�� SameOutput2619425148/001/stability-test.md 55244/b368/impor--jq /usr/bin/git che/go-build/fa/git **/*.cjs 64/bin/go git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha vaScript515671689/001/test-frontmatter-with-env-template-expressions.md config /usr/bin/unpigz remote.origin.urgit GO111MODULE 64/bin/go /usr/bin/unpigz -d -c node 9686119/b286/vet.cfg --check **/*.cjs 64/bin/go git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha /tmp/go-build1289686119/b407/stringutil.test l /usr/bin/git -s -w -buildmode=exe git add .github/workflows/test.md -extld=gcc /usr/bin/git -json GO111MODULE nch,headSha,disp--show-toplevel git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env ithub/workflows GO111MODULE x_amd64/vet l GOMOD DiscussionsEnablf() { test "$1" = get && echo "******"; }; f get x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha /home/REDACTED/work/gh-aw/gh-aw/.github/workflows config /usr/bin/git remote.origin.urgit GO111MODULE r: $owner, name:--show-toplevel git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha ere go /usr/bin/git ith-tools.md GO111MODULE ache/go/1.25.0/x--show-toplevel git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE ache/go/1.25.0/x--show-toplevel git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE sh -c "prettier" --check 'scripts/**/*GOINSECURE GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go go (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v7
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v7 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/xGO111MODULE env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v7 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/xGO111MODULE env 55244/b369/_pkg_GOINSECURE GO111MODULE 64/bin/go GOINSECURE b/gh-aw/pkg/cli/-test.testlogfile=/tmp/go-build2076281289/b001/testlog.txt GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v7 --jq .object.sha /tmp/go-build92555244/b367/_pkg_GOINSECURE -trimpath 64/bin/go -p github.com/githu-1 -lang=go1.25 go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha go1.25.0 -c=4 -nolocalimports -importcfg /tmp/go-build1289686119/b383/importcfg -pack /tmp/go-build1289686119/b383/_testmain.go env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/4dc6199c7b1a012772edbd06daecab0f50c9053c
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/4dc6199c7b1a012772edbd06daecab0f50c9053c --jq .object.sha /tmp/go-build925-f -trimpath 64/bin/go -d main -lang=go1.25 go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha blog-auditor.md -f /usr/bin/unpigz -f owner=github DiscussionsEnabl--show-toplevel /usr/bin/unpigz -d 4928-33454/test-1360292302 node /usr/bin/git --check **/*.cjs r: $owner, name:--show-toplevel git (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v5 --jq .object.sha -json GO111MODULE $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD GOMODCACHE sh -c npx prettier --cGOSUMDB GOPROXY 64/bin/go GOSUMDB GOWORK run-script/lib/n/home/REDACTED/work/gh-aw/gh-aw/.github/workflows node (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v5 --jq .object.sha -json GO111MODULE $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD GOMODCACHE sh -c npx prettier --cremote.origin.url GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go node (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v6 --jq .object.sha GOSUMDB GOWORK 64/bin/go GOINSECURE GOMOD GOMODCACHE go env ck 'scripts/**/*GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v6 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD erignore go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v6 --jq .object.sha -json GO111MODULE $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD erignore go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha 02 rev-parse (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha GOSUMDB GOWORK 64/bin/go GOINSECURE GOMOD GOMODCACHE go env ck 'scripts/**/*GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha faeb46333289a3cdGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD erignore go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/anchore/sbom-action/git/ref/tags/v0
- Triggering command: /usr/bin/gh gh api /repos/anchore/sbom-action/git/ref/tags/v0 --jq .object.sha log.showsignatur-f log 64/bin/go -d --format=format:-C 76d9cf359aed go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/anchore/sbom-action/git/ref/tags/v0 --jq .object.sha /tmp/go-build925-f -trimpath 64/bin/go -p main -lang=go1.25 go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/docker/build-push-action/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v6 --jq .object.sha log.showsignature=false log 64/bin/go -d --format=format:-1 76d9cf359aed93f9xterm-color go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v6 --jq .object.sha ACCEPT -trimpath 64/bin/go -p github.com/githu-C -lang=go1.25 go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/docker/login-action/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq .object.sha erignore /opt/hostedtoolcGO111MODULE 64/bin/go -d grep 64/bin/go go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq .object.sha -x c 64/bin/go -d -buildtags 64/bin/go go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/docker/metadata-action/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v5 --jq .object.sha /tmp/go-build925-f -trimpath 64/bin/go -d github.com/githu-1 -lang=go1.25 go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v5 --jq .object.sha /tmp/go-build92555244/b358/_pkg_GOINSECURE -trimpath 64/bin/go -p github.com/githu-C -lang=go1.25 go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/docker/setup-buildx-action/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v3 --jq .object.sha log.showsignatur-f log 64/bin/go -d -extld=gcc 64/bin/go go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v3 --jq .object.sha /tmp/go-build92555244/b343/_pkg_GOINSECURE -trimpath 64/bin/go -p main -lang=go1.25 go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 GO111MODULE /opt/hostedtoolc-test.short=true GOINSECURE GOMOD ed } } go env -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE me: String!) { repository(owne-lang=go1.25 GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x-importcfg GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env ithub/workflows GO111MODULE /opt/hostedtoolcache/go/1.25.0/x-importcfg GOINSECURE GOMOD ed } } go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 GO111MODULE x_amd64/vet GOINSECURE GOMOD ed } } x_amd64/vet env -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env ub/workflows GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE me: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD GOMODCACHE go env ub/workflows GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 GO111MODULE repository(owne-nilfunc GOINSECURE GOMOD GOMODCACHE go estl�� -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD ed } } go (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE r: $owner, name: $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.0/x-lang=go1.25 GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 GOMOD GOMODCACHE x_amd64/vet env ty-test.md GO111MODULE (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/c4e091835c7a94dc7d3acb8ed3ae145afb4995f3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/c4e091835c7a94dc7d3acb8ed3ae145afb4995f3 --jq .object.sha 55244/b376/_pkg_GOINSECURE GO111MODULE 64/bin/go GOINSECURE b/gh-aw/pkg/consrev-parse GOMODCACHE go env vEp_/1dWwJgcxF7HGOSUMDB GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 55244/b376/importcfg (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env 3316920320/.github/workflows GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/githubnext/agentics/git/ref/tags/-
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/- --jq .object.sha -json GO111MODULE $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD GOMODCACHE sh -c npx prettier --cremote.origin.url GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go go (http block)
https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x-buildmode=exe GOINSECURE GOMOD GOMODCACHE F5/4qLQS-oeomrMmfGrEiad/6CmI5DOkrev-parse env -json GO111MODULE me: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD GOMODCACHE o "�� Warning: .github/aw/actions-lock.json does not exist yet"rev-parse (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE go env ty-test.md GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo r: $owner, name: $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE r: $owner, name: $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/owner/repo/contents/file.md
- Triggering command: /tmp/go-build1289686119/b368/cli.test /tmp/go-build1289686119/b368/cli.test -test.testlogfile=/tmp/go-build1289686119/b368/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/user
- Triggering command: /usr/bin/gh gh api user --jq .login add-reviewer tatus.md rep add-reviewer (http block)
- Triggering command: /usr/bin/gh gh api user --jq .login add-reviewer outputs-spec-review.md 0/x64/bin/grep add-reviewer -create-pull-req-l 0/x64/bin/grep grep -l add-reviewer ows/docs-noob-tester.md (http block)
- Triggering command: /usr/bin/gh gh api user --jq .login add-reviewer mance-analyzer.md 64/bin/grep add-reviewer ows/test-claude--l 64/bin/grep grep -l add-reviewer iet.md ache/go/1.25.0/x64/bin/grep add-reviewer is.md ache/go/1.25.0/xadd-reviewer grep (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

This section details on the original issue you should resolve

<issue_title>add-reviewer safe-output handler not loaded at runtime — message skipped with warning</issue_title>
<issue_description>## add-reviewer safe-output handler not loaded at runtime — message skipped with warning

Description

The add-reviewer safe-output is accepted during compilation without errors, but at runtime the handler is never loaded. The agent successfully produces an add_reviewer message, but the output processing job skips it with a warning:

⚠️ No handler loaded for message type 'add_reviewer' (message 8/11). The message will be skipped. This may happen if the safe output type is not configured in the workflow's safe-outputs section.

The reviewer is not added to the pull request.

Reproduction
Configure add-reviewer in the workflow frontmatter:
safe-outputs:
  add-reviewer:
    reviewers: [copilot]
    max: 3
    target: "*"
Compile the workflow — succeeds with no errors or warnings.

Trigger the workflow on a pull request.

The agent emits an add_reviewer message, but the handler is missing and the message is skipped.
Links

Workflow source: security-review.md

Failed run: actions/runs/22156723113

Code is part of a Pull Request: #17

Expected behavior

The add-reviewer handler should be loaded during output processing and Copilot should be added as a reviewer on the pull request.

Actual behavior

The handler is not loaded. The message is silently skipped with a warning. No reviewer is added.

Environment

gh aw version: v0.46.0

Engine: Copilot

COPILOT_GITHUB_TOKEN secret: configured (fine-grained PAT with Pull requests: Read and write + Copilot Requests: Read-only)

Notes

Compilation validates the add-reviewer schema correctly (rejects reviewers: copilot, accepts reviewers: [copilot]), so the schema is wired up — only the runtime handler appears to be missing.

Workaround: configure Copilot as a required reviewer via branch protection rules.</issue_description>

Comments on the Issue (you are @copilot in this section)

Fixes add-reviewer safe-output handler not loaded at runtime — message skipped with warning #16642

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

- Add add_reviewer handler with reviewers allowlist - Add assign_milestone handler with allowed milestones - Add mark_pull_request_as_ready_for_review handler - Add create_code_scanning_alert handler with driver config - Add create_agent_session handler with base branch config These handlers exist in JavaScript HANDLER_MAP but were missing from the Go handlerRegistry, causing their configurations to be excluded from GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG environment variable. This resulted in handlers not being loaded at runtime despite successful compilation. Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-02-19T00:49:47Z

@copilot:claude-sonnet-4.5 update smoke-copilot to add a safe output add-reviewer with pelikhan user on one of issue retreived in the run.

Copilot · 2026-02-19T00:49:51Z

@pelikhan The model sweagent-capi is not available for your account. This can happen if the model was disabled by your organization's policy or if your Copilot plan doesn't include access to it.

You can try again without specifying a model (just @copilot) to use the default, or choose a different model from the model picker.

If you want to contact GitHub about this error, please mention the following identifier so they can better serve you: 18f49c9c-7700-4ef3-8e6b-5ae800028c0b

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot

Pull request overview

This pull request fixes a runtime loading issue where five safe-output handlers (add_reviewer, assign_milestone, mark_pull_request_as_ready_for_review, create_code_scanning_alert, create_agent_session) were being skipped with "No handler loaded" warnings despite having JavaScript implementations and being listed in the handler map.

Changes:

Added Go-side configuration builders for the 5 missing handlers in handlerRegistry
Updated lock files to include the newly generated handler configurations in the runtime environment variable

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
pkg/workflow/compiler_safe_outputs_config.go	Added configuration builders for 5 handlers to populate runtime environment variable
.github/workflows/smoke-claude.lock.yml	Updated with add_reviewer handler configuration
.github/workflows/poem-bot.lock.yml	Updated with create_agent_session handler configuration
.github/workflows/daily-semgrep-scan.lock.yml	Updated with create_code_scanning_alert handler configuration
.github/workflows/daily-mcp-concurrency-analysis.lock.yml	Updated with create_agent_session handler configuration
.github/workflows/daily-malicious-code-scan.lock.yml	Updated with create_code_scanning_alert handler configuration

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Initial plan

92f1e42

Copilot AI assigned Copilot and pelikhan Feb 19, 2026

Copilot started work on behalf of pelikhan February 19, 2026 00:39 View session

Verification: handler configs now included in compiled workflows

5ca8179

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Fix add-reviewer safe-output handler not loaded at runtime~~ Fix runtime loading for add-reviewer and 4 other safe-output handlers Feb 19, 2026

Copilot finished work on behalf of pelikhan February 19, 2026 00:55

Merge branch 'main' into copilot/fix-add-reviewer-handler

9e72dd1

github-actions bot mentioned this pull request Feb 19, 2026

Smoke Test: Claude - 22164030442 #16696

Closed

pelikhan marked this pull request as ready for review February 19, 2026 01:05

Copilot AI review requested due to automatic review settings February 19, 2026 01:05

pelikhan merged commit 102ca62 into main Feb 19, 2026
56 checks passed

pelikhan deleted the copilot/fix-add-reviewer-handler branch February 19, 2026 01:05

Copilot started reviewing on behalf of pelikhan February 19, 2026 01:05 View session

Copilot AI reviewed Feb 19, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fix runtime loading for add-reviewer and 4 other safe-output handlers#16688

Fix runtime loading for add-reviewer and 4 other safe-output handlers#16688
pelikhan merged 4 commits intomainfrom
copilot/fix-add-reviewer-handler

Copilot AI commented Feb 19, 2026 •

edited

Loading

Uh oh!

pelikhan commented Feb 19, 2026

Uh oh!

Copilot AI commented Feb 19, 2026

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Comments

Conversation

Copilot AI commented Feb 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Root Cause

Changes

Impact

I tried to connect to the following addresses, but was blocked by firewall rules:

Description

Reproduction

Links

Expected behavior

Actual behavior

Environment

Notes

Comments on the Issue (you are @copilot in this section)

Uh oh!

pelikhan commented Feb 19, 2026

Uh oh!

Copilot AI commented Feb 19, 2026

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Comments

Copilot AI commented Feb 19, 2026 •

edited

Loading