Add missing ecosystem domains to fix build-test v6 failures across 10 languages by Copilot · Pull Request #21635 · github/gh-aw

Copilot · 2026-03-18T18:54:35Z

v6 build-test (248 repos, March 2026) identified domain allowlist gaps as the #1 fixable blocker — affecting 35+ repos with Kotlin at 0% builds, Groovy/Java regressed, and Scala/Zig/PowerShell partially blocked.

Domain additions to `pkg/workflow/data/ecosystem_domains.json`

kotlin: maven.pkg.jetbrains.space — 81 blocked requests per run; Kotlin was completely broken
java: develocity.apache.org, scans-in.gradle.com, ge.spockframework.org, *.gradle-enterprise.cloud — Gradle Enterprise telemetry/scan domains blocking spock, grails-core, caffeine
scala: scala.jfrog.io — JFrog Artifactory mirror used by gitbucket, playframework, zio
zig: deps.files.ghostty.org — ghostty dependency source
bazel: pypi.org, files.pythonhosted.org — rules_python fetches Python packages during Bazel builds
defaults: www.googleapis.com — cross-ecosystem (dagger/Java, rules_python/Bazel)
powershell (new): powershellgallery.com, www.powershellgallery.com — PSScriptAnalyzer and the broader PowerShell ecosystem had no entry

📍 Connect Copilot coding agent with Jira, Azure Boards or Linear to delegate work to Copilot in one click without leaving your project management tool.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot

Pull request overview

Updates the domain allowlist data used by workflows (to unblock multi-language build/test runs) and regenerates workflow lockfiles to reflect updated safe-outputs handler configuration.

Changes:

Expand ecosystem domain allowlists (e.g., Kotlin/Java/Scala/Zig/Bazel/PowerShell/defaults).
Update many .github/workflows/*.lock.yml files to include noop in GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG (and, in some workflows, upload_asset / assign_to_agent).

Reviewed changes

Copilot reviewed 170 out of 170 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
.github/workflows/workflow-skill-extractor.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/workflow-normalizer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/workflow-health-manager.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/workflow-generator.lock.yml	Adds `noop` and `assign_to_agent` to safe-outputs handler config.
.github/workflows/weekly-safe-outputs-spec-review.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/weekly-issue-summary.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/weekly-editors-health-check.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/weekly-blog-post-writer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/video-analyzer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/ubuntu-image-analyzer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/typist.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/test-project-url-default.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/test-dispatcher.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/test-create-pr-error-handling.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/terminal-stylist.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/super-linter.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/sub-issue-closer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/step-name-alignment.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/static-analysis-report.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/stale-repo-identifier.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/smoke-workflow-call.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/smoke-workflow-call-with-inputs.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/smoke-temporary-id.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/smoke-gemini.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/smoke-copilot.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/smoke-copilot-arm.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/smoke-codex.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/smoke-call-workflow.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/smoke-agent-scoped-approved.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/smoke-agent-public-none.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/smoke-agent-public-approved.lock.yml	Adds `noop` (and `assign_to_agent`) to safe-outputs handler config.
.github/workflows/smoke-agent-all-none.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/smoke-agent-all-merged.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/slide-deck-maintainer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/sergo.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/semantic-function-refactor.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/security-review.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/security-compliance.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/security-alert-burndown.campaign.g.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/scout.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/schema-consistency-checker.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/safe-output-health.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/research.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/repository-quality-improver.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/repo-tree-map.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/repo-audit-analyzer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/release.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/refiner.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/q.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/python-data-charts.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/prompt-clustering-analysis.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/pr-triage-agent.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/pr-nitpick-reviewer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/portfolio-analyst.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/plan.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/pdf-summary.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/org-health-report.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/notion-issue-summary.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/mergefest.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/mcp-inspector.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/lockfile-stats.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/layout-spec-maintainer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/issue-triage-agent.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/issue-monster.lock.yml	Adds `noop` (and `assign_to_agent`) to safe-outputs handler config.
.github/workflows/issue-arborist.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/hourly-ci-cleaner.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/grumpy-reviewer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/gpclean.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/go-pattern-detector.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/go-logger.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/go-fan.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/glossary-maintainer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/github-remote-mcp-auth-test.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/github-mcp-structural-analysis.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/firewall-escape.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/example-workflow-analyzer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/duplicate-code-detector.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/draft-pr-cleanup.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/docs-noob-tester.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/discussion-task-miner.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/dictation-prompt.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/dev.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/dev-hawk.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/dependabot-go-checker.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/dependabot-burner.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/delight.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/deep-report.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/dead-code-remover.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-workflow-updater.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-testify-uber-super-expert.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-team-status.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-team-evolution-insights.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-syntax-error-quality.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-semgrep-scan.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-security-red-team.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-secrets-analysis.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-safe-outputs-conformance.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-safe-output-optimizer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-safe-output-integrator.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-repo-chronicle.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/daily-regulatory.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-performance-summary.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/daily-observability-report.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-news.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/daily-multi-device-docs-tester.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/daily-mcp-concurrency-analysis.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-malicious-code-scan.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-issues-report.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/daily-function-namer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-firewall-report.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/daily-file-diet.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-fact.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-doc-updater.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-copilot-token-report.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/daily-compiler-quality.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-code-metrics.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/daily-cli-tools-tester.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-cli-performance.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-choice-test.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-assign-issue-to-user.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/daily-architecture-diagram.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/craft.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/copilot-session-insights.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/copilot-pr-prompt-analysis.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/copilot-pr-nlp-analysis.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/copilot-pr-merged-report.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/copilot-cli-deep-research.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/copilot-agent-analysis.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/contribution-check.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/constraint-solving-potd.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/commit-changes-analyzer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/code-simplifier.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/cli-version-checker.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/cli-consistency-checker.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/claude-code-user-docs-review.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/ci-doctor.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/ci-coach.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/breaking-change-checker.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/brave.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/bot-detection.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/blog-auditor.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/auto-triage-issues.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/audit-workflows.lock.yml	Adds `noop` and `upload_asset` to safe-outputs handler config.
.github/workflows/artifacts-summary.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/archie.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/ai-moderator.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/agent-persona-explorer.lock.yml	Adds `noop` to safe-outputs handler config.
.github/workflows/agent-performance-analyzer.lock.yml	Adds `noop` to safe-outputs handler config.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

.github/workflows/workflow-generator.lock.yml

          GITHUB_SERVER_URL: ${{ github.server_url }}
          GITHUB_API_URL: ${{ github.api_url }}
-          GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"missing_data\":{},\"missing_tool\":{},\"update_issue\":{\"allow_body\":true,\"allow_status\":true,\"max\":1}}"
+          GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"assign_to_agent\":{\"allowed\":[\"copilot\"],\"max\":1,\"target\":\"triggering\"},\"missing_data\":{},\"missing_tool\":{},\"noop\":{\"max\":1,\"report-as-issue\":\"true\"},\"update_issue\":{\"allow_body\":true,\"allow_status\":true,\"max\":1}}"


pelikhan · 2026-03-18T21:50:02Z

@copilot merge main and fix build wasm

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-03-18T22:02:06Z

@copilot merge main and fix build wasm

Done in 8cb1392. Merged main, recompiled all workflow lock files, and updated the wasm golden test files to fix the build-wasm CI failure (TestWasmGolden_CompileFixtures was failing because the golden files were out of date with the latest compiler output).

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw FwYCieEEjMG8 (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw -embedcfg /tmp/go-build2835918793/b295/embedcfg -pack (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha (http block)
https://api.github.com/repos/github/gh-aw
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .visibility (http block)
https://api.github.com/repos/githubnext/agentics/git/ref/tags/
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Initial plan

4b6b8e7

Copilot AI assigned Copilot and pelikhan Mar 18, 2026

Copilot started work on behalf of pelikhan March 18, 2026 18:54 View session

Copilot AI linked an issue Mar 18, 2026 that may be closed by this pull request

[Build-Test v6] Missing ecosystem domains blocking 35+ repos across 10 languages #21627

Closed

Copilot AI and others added 2 commits March 18, 2026 19:03

Initial plan - no changes yet

4279c7e

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Add missing ecosystem domains to fix build-test v6 failures

682e4f5

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] [Build-Test v6] Add missing ecosystem domains for 35+ repos~~ Add missing ecosystem domains to fix build-test v6 failures across 10 languages Mar 18, 2026

Copilot AI requested a review from pelikhan March 18, 2026 19:08

Copilot finished work on behalf of pelikhan March 18, 2026 19:08

pelikhan marked this pull request as ready for review March 18, 2026 20:45

Copilot AI review requested due to automatic review settings March 18, 2026 20:45

Copilot AI reviewed Mar 18, 2026

View reviewed changes

Copilot started work on behalf of pelikhan March 18, 2026 21:50 View session

Merge main, recompile workflows, update wasm golden files

8cb1392

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan March 18, 2026 22:02

Merge branch 'main' into copilot/build-test-v6-fix-ecosystem-domains

5ef41dd

pelikhan merged commit f145684 into main Mar 18, 2026
49 checks passed

pelikhan deleted the copilot/build-test-v6-fix-ecosystem-domains branch March 18, 2026 22:45

This was referenced Mar 18, 2026

chore: bump MCP gateway version to v0.1.18 #21660

Merged

Smoke Test: Claude - 23270858861 #21669

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add missing ecosystem domains to fix build-test v6 failures across 10 languages#21635

Add missing ecosystem domains to fix build-test v6 failures across 10 languages#21635
pelikhan merged 5 commits intomainfrom
copilot/build-test-v6-fix-ecosystem-domains

Copilot AI commented Mar 18, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

pelikhan commented Mar 18, 2026

Uh oh!

Copilot AI commented Mar 18, 2026 •

edited

Loading

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

Copilot AI commented Mar 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Domain additions to pkg/workflow/data/ecosystem_domains.json

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

pelikhan commented Mar 18, 2026

Uh oh!

Copilot AI commented Mar 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Mar 18, 2026 •

edited

Loading

Domain additions to `pkg/workflow/data/ecosystem_domains.json`

Copilot AI commented Mar 18, 2026 •

edited

Loading