From ed6de86232ac8df4512750741a17a9d7eb83821e Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 21 Apr 2026 20:57:33 +0000
Subject: [PATCH 1/2] Initial plan


From 1f6a368d4a8c29de49abad1160af65cc0a2a0313 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 21 Apr 2026 21:22:21 +0000
Subject: [PATCH 2/2] test(workflow): update integration fixtures to remove
 deprecated network.firewall

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/07f1ceb0-ceab-47ee-a71d-5f84a5f6979a

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
---
 pkg/workflow/aw_info_steps_test.go               | 6 ++----
 pkg/workflow/blocked_domains_integration_test.go | 5 -----
 pkg/workflow/step_summary_test.go                | 1 -
 3 files changed, 2 insertions(+), 10 deletions(-)

diff --git a/pkg/workflow/aw_info_steps_test.go b/pkg/workflow/aw_info_steps_test.go
index 3677a674c03..f549b98d7ce 100644
--- a/pkg/workflow/aw_info_steps_test.go
+++ b/pkg/workflow/aw_info_steps_test.go
@@ -29,8 +29,6 @@ permissions:
   issues: read
   pull-requests: read
 engine: copilot
-network:
-  firewall: true
 ---
 
 # Test firewall enabled
@@ -49,8 +47,8 @@ permissions:
   issues: read
   pull-requests: read
 engine: copilot
-network:
-  firewall: false
+sandbox:
+  agent: false
 strict: false
 ---
 
diff --git a/pkg/workflow/blocked_domains_integration_test.go b/pkg/workflow/blocked_domains_integration_test.go
index 7292a5e7302..befd726f49c 100644
--- a/pkg/workflow/blocked_domains_integration_test.go
+++ b/pkg/workflow/blocked_domains_integration_test.go
@@ -29,7 +29,6 @@ permissions:
   contents: read
 engine: copilot
 network:
-  firewall: true
   allowed:
     - defaults
     - github
@@ -106,7 +105,6 @@ permissions:
   contents: read
 engine: copilot
 network:
-  firewall: true
   allowed:
     - defaults
     - github
@@ -177,7 +175,6 @@ permissions:
   contents: read
 engine: copilot
 network:
-  firewall: true
   allowed:
     - defaults
     - github
@@ -238,7 +235,6 @@ permissions:
   contents: read
 engine: claude
 network:
-  firewall: true
   allowed:
     - defaults
   blocked:
@@ -300,7 +296,6 @@ permissions:
   contents: read
 engine: codex
 network:
-  firewall: true
   allowed:
     - defaults
   blocked:
diff --git a/pkg/workflow/step_summary_test.go b/pkg/workflow/step_summary_test.go
index df633c2db51..9a78b09da1f 100644
--- a/pkg/workflow/step_summary_test.go
+++ b/pkg/workflow/step_summary_test.go
@@ -167,7 +167,6 @@ network:
   allowed:
     - defaults
     - node
-  firewall: true
 ---
 
 # Test Workflow Overview