Skip to content

Migrate 24 workflows from daily-audit-discussion + reporting to daily-audit-base#28151

Merged
pelikhan merged 2 commits intomainfrom
copilot/refactor-migrate-29-workflows
Apr 23, 2026
Merged

Migrate 24 workflows from daily-audit-discussion + reporting to daily-audit-base#28151
pelikhan merged 2 commits intomainfrom
copilot/refactor-migrate-29-workflows

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 23, 2026

29 workflows were importing shared/daily-audit-discussion.md and shared/reporting.md individually instead of using the existing shared/daily-audit-base.md which bundles both plus free OTLP telemetry.

Changes

  • 24 workflow .md files: Replaced the two-import block with a single daily-audit-base.md import, preserving title-prefix and expires parameters

    # Before
    imports:
      - uses: shared/daily-audit-discussion.md
        with:
          title-prefix: "[my-workflow] "
          expires: 1d
      - shared/reporting.md
    
    # After
    imports:
      - uses: shared/daily-audit-base.md
        with:
          title-prefix: "[my-workflow] "
          expires: 1d
  • 24 .lock.yml files: Regenerated via make recompile

Notes

  • 2 workflows with daily-audit-discussion but no reporting.md (github-remote-mcp-auth-test, go-fan) were intentionally excluded — the issue's consolidation target requires both imports to be present
  • Migration adds GH_AW_OTEL_ENDPOINT / GH_AW_OTEL_HEADERS secrets to each migrated workflow via the bundled observability-otlp.md — same secrets already used by the 10 existing daily-audit-base.md workflows

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • https://api.github.com/graphql
    • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
    • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw Xb__Y-RkHv7K (http block)
    • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw daily-regulatoryinstall-gh-aw.sh scout.md sub-issue-closer.md chan�� deep-report.md daily-news.md test-project-url-default.md craft.md smoke-project.md/usr/bin/runc daily-repo-chron--version copilot-pr-prompt-analysis.md (http block)
  • https://api.github.com/orgs/test-owner/actions/secrets
    • Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name -c=4 -nolocalimports -importcfg /tmp/go-build537192944/b419/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/fileutil/fileutil.go /home/REDACTED/work/gh-aw/gh-aw/pkg/fileutil/tar.go ules�� ithub/workflows node /usr/bin/infocmp-nilfunc view -- DiscussionsEnabl/tmp/go-build537192944/b423/_pkg_.a infocmp (http block)
  • https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
    • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv download 1 /usr/bin/git test-logs/run-1 cfg 64/pkg/tool/linu--show-toplevel git -C /tmp/gh-aw-test-runs/20260423-195206-24758/test-2763859847 config /usr/bin/git remote.origin.urnode rev-parse ache/go/1.25.8/xinstall git (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v3
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv -bool -buildtags /opt/hostedtoolcache/node/24.14.1/x64/bin/node -errorsas -ifaceassert -nilfunc node /tmp�� /tmp/TestHashStability_SameInputSameOutput1241216762/001/stability-test.md l /usr/bin/git '**/*.ts' '**/*.git show x_amd64/vet git (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v5
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv sh6S/bYSD5ck1bNG-kK2Gsh6S git _.a /home/REDACTED/worgit config /usr/bin/git Bh/hKJC44cVKMHVnpBvTgXO/G1KutSxXHjoE8hqd2SJr --wr�� k/gh-aw/gh-aw/internal/tools/actions-build/main.go !../../../pkg/workflow/js/**/*.json 1/x64/bin/node ../../../.prettigit show r: $owner, name:--show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel /tmp/gh-aw-merge-1944282076/new.md /usr/bin/git se 192944/b146/vet.\n cfg git rev-�� --show-toplevel ache/go/1.25.8/x64/pkg/tool/linu-importcfg /usr/bin/git se 192944/b246/vet.rev-parse ache/go/1.25.8/x--show-toplevel git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel /usr/lib/git-core/git /usr/bin/git --pack_header=2,git -q ache/go/1.25.8/x--show-toplevel git rev-�� --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git /tmp/gh-aw-test-git remote /usr/bin/git git (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v6
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /tmp/TestGuardPolicyMinIntegrityOnlymin-integrity_with_explicit_repo3178797992/001 config /usr/bin/git remote.origin.urgit show ode_modules/.bin--show-toplevel git rev-�� --show-toplevel l /usr/bin/git rt/yaml/yaml_defgit /usr/bin/gh x_amd64/vet git (http block)
  • https://api.github.com/repos/actions/github-script/git/ref/tags/v8
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv --show-toplevel hz/8-8vmLiYCmHH9yLNKNaz/ITCHFh6Rremote2 /usr/bin/git 3815510199 /usr/bin/gh 1/x64/bin/node git rev-�� --show-toplevel 192944/b413/constants.test /usr/bin/git vaScript49513920git /tmp/go-build537rev-parse 1/x64/bin/node git (http block)
  • https://api.github.com/repos/actions/github-script/git/ref/tags/v9
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw show me: String!) { repository(owner: $owner, name:-f k/gh-aw/gh-aw rev-parse me: String!) { -bool git -C on' --ignore-pat-errorsas show odules/npm/node_-nilfunc k/gh-aw/gh-aw/.g/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet show r: $owner, name:-bool git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw/.g-errorsas npm me: String!) { -nilfunc l @sentry/mcp-serv-test.testlogfile=/tmp/go-build537192944/b413/testlog.txt $name) { has-test.paniconexit0 git ode_�� /home/REDACTED/wor-test.timeout=10m0s config x_amd64/vet remote.origin.urgh mcp/ast-grep:latapi ed } } x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw rev-parse ilot-arm.lock.ym-nilfunc ithub/workflows config $name) { has-bool git -C ithub/workflows show x_amd64/vet ithub/workflows show /usr/bin/gh x_amd64/vet (http block)
  • https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linuremote.origin.url /usr/bin/gh /home/REDACTED/worgit cfg 64/pkg/tool/linu--show-toplevel gh run list --json /usr/bin/git --workflow nonexistent-workrev-parse --limit git (http block)
  • https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /tmp/TestGuardPolicyMinIntegrityOnlymin-integrity_with_repos=public_909852622/001 rev-parse /usr/bin/git -c=4 -nolocalimports -importcfg git -C /home/REDACTED/work/gh-aw/gh-aw/.github/workflows (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linutest@example.com /opt/hostedtoolcache/node/24.14.1/x64/bin/node ting Go code..."git cfg 64/pkg/tool/linu--show-toplevel /opt/hostedtoolcache/node/24.14.1/x64/bin/node /tmp�� Safe: ${{ github.actor }}, Unsafe: ${{ secrets.TOKEN }} 64/pkg/tool/linux_amd64/vet /usr/bin/git graphql -f 64/pkg/tool/linu--show-toplevel git (http block)
  • https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv r-test2229548193/test1.md r-test2229548193/test2.lock.yml /usr/bin/git -c=4 -nolocalimports -importcfg 192944/b449/importcfg -C s/test.md k/gh-aw/gh-aw/pkg/styles/theme.go /usr/bin/infocmp remote.origin.urgit -f er: String!, $na--show-toplevel infocmp (http block)
  • https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
    • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv (http block)
    • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv --local credential.helper e (http block)
    • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw/.github/workflows/github-mcp-tools-report.md HEAD $name) { hasDiscussionsEnabled } } (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv --git-dir x_amd64/vet /opt/hostedtoolcache/node/24.14.1/x64/bin/node -frontmatter.md cfg 64/pkg/tool/linu--show-toplevel /opt/hostedtoolcache/node/24.14.1/x64/bin/node /tmp�� env.NODE_VERSION 64/pkg/tool/linuremote.origin.url /usr/bin/git ty-test.md LsRemoteWithRealrev-parse 64/pkg/tool/linu--show-toplevel git (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv ons-test915432025 git /usr/bin/git 3691020610/001' 3691020610/001' er: String!, $na--show-toplevel git init�� $name) { has-bool l /usr/bin/git 01 git x_amd64/vet git (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv ons-test915432025 config /usr/bin/git l rev-parse /usr/bin/git git -C /tmp/gh-aw-test-runs/20260423-195206-24758/test-1528216146 remote /usr/bin/git ./../pkg/workflogit show x_amd64/vet git (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name cfg 64/pkg/tool/linux_amd64/vet -f r -f 64/pkg/tool/linux_amd64/vet lib/�� 1816638867 show til.test ithub/workflows show /usr/bin/git til.test (http block)
    • Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 cfg 64/pkg/tool/linux_amd64/vet xterm-color git yml 64/pkg/tool/linu-buildtags -C /home/REDACTED/wor-errorsas rev-parse ache/go/1.25.8/x-nilfunc ./../.prettieriggit rev-parse kflows/security---git-dir ache/go/1.25.8/x-tests (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name cfg 64/pkg/tool/linux_amd64/vet remote.origin.ur/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -f fe-outputs-spec--unreachable=false 64/pkg/tool/linu/tmp/go-build537192944/b112/vet.cfg k/gh�� _test.go st.go 64/pkg/tool/linux_amd64/compile /../../.prettiergit erignore .lock.yml 64/pkg/tool/linux_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 cfg 64/pkg/tool/linux_amd64/vet remote.origin.urgit r r: $owner, name:user.email 64/pkg/tool/linutest@example.com k/gh�� om/stretchr/testify@v1.11.1/require/doc.go om/stretchr/testify@v1.11.1/require/forward_requ-test.run=^Test ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /../../.prettiergit erignore me: String!) { --show-toplevel ache/go/1.25.8/x64/pkg/tool/linu-trimpath (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name cfg 64/pkg/tool/linux_amd64/vet ithub/workflows git kflows/hourly-ci--show-toplevel 64/pkg/tool/linux_amd64/vet k/gh�� graphql on 64/pkg/tool/linux_amd64/link /../../.prettiernode erignore -f 64/pkg/tool/linux_amd64/link (http block)
    • Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 cfg 64/pkg/tool/linu-importcfg /home/REDACTED/worgit r er: String!, $nauser.name 64/pkg/tool/linuTest User k/gh�� /home/REDACTED/work/gh-aw/gh-aw on ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile /../../.prettiergit erignore repository(owne--show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name cfg 64/pkg/tool/linux_amd64/vet k/gh-aw/gh-aw/.g/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet r repository(owne-unreachable=false 64/pkg/tool/linu/tmp/go-build537192944/b115/vet.cfg -C 1816638867/.github/workflows config util.test remote.origin.urnode config r: $owner, name:/home/REDACTED/work/gh-aw/gh-aw/.github/workflows/api-consumption-report.md util.test (http block)
    • Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 cfg 64/pkg/tool/linux_amd64/vet remote.origin.urgit --jq (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name cfg 64/pkg/tool/linux_amd64/vet k/gh-aw/gh-aw/.ggit r $name) { hasuser.email 64/pkg/tool/linutest@example.com -C /home/REDACTED/work/gh-aw/gh-aw/.github/workflows config ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet remote.origin.urgit -f $name) { has--git-dir ache/go/1.25.8/x64/pkg/tool/linuremote (http block)
    • Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 cfg 64/pkg/tool/linux_amd64/vet ithub/workflows git ode-gyp-bin/sh 64/pkg/tool/linuTest User -C /home/REDACTED/work/gh-aw/gh-aw/.github/workflows cfg ck ./../.prettieriggit show repository(owne--show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name cfg 64/pkg/tool/linux_amd64/vet k/gh-aw/gh-aw/.ggit r /usr/bin/docker 64/pkg/tool/linuTest User -C /home/REDACTED/work/gh-aw/gh-aw/.ggo1.25.8 rev-parse ache/go/1.25.8/x64/pkg/tool/linu-nolocalimports k/gh-aw/gh-aw ghcr.io/github/srev-parse bservability-kit--show-toplevel ache/go/1.25.8/x64/pkg/tool/linuconfig (http block)
    • Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 cfg 64/pkg/tool/linux_amd64/vet -f owner=github -f 64/pkg/tool/linux_amd64/vet -C /home/REDACTED/work/gh-aw/gh-aw/.github/workflows config k ./../.prettieriggit config mption-report.lo--show-toplevel ache/go/1.25.8/x64/pkg/tool/linu-trimpath (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name cfg 64/pkg/tool/linu-lang=go1.25 remote.origin.urnode r .yml 64/pkg/tool/linu-dwarf=false -C /home/REDACTED/worgo1.25.8 cfg ache/go/1.25.8/x-nolocalimports xterm-color iptables repository(owne--show-toplevel ache/go/1.25.8/x/tmp/go-build537192944/b472/_testmain.go (http block)
    • Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 cfg 64/pkg/tool/linu-nolocalimports /home/REDACTED/worgit config r: $owner, name:--show-toplevel 64/pkg/tool/linu/tmp/go-build537192944/b462/_testmain.go -C 4259795361/custom/workflows show ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet ./../.prettieriggit show me: String!) { --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
  • https://api.github.com/repos/github/gh-aw/actions/workflows
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path 647300084/001' 647300084/001' /usr/local/bin/b-nilfunc l config validator.lock.y-unreachable=false bash ules�� k/gh-aw/gh-aw/.github/workflows :latest /usr/bin/git l -- $name) { has--show-toplevel git (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 owner=github -f x_amd64/vet -C k/gh-aw/gh-aw atted/golang/pkg/flatted/flatted-ifaceassert x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 ctions-build/mairev-parse r 64/pkg/tool/linux_amd64/vet ctio�� te '../../../**/*.json' '!../../../pkg/workflow/-errorsas nomaly.go cfg remote.origin.urgit show c53d415d:go.mod ache/go/1.25.8/x64/pkg/tool/linuremote.origin.url (http block)
  • https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md
    • Triggering command: /tmp/go-build537192944/b404/cli.test /tmp/go-build537192944/b404/cli.test -test.testlogfile=/tmp/go-build537192944/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true ithub/workflows rev-parse DiscussionsEnabl-bool infocmp -1 json' --ignore-p-errorsas git /home/REDACTED/.ca-nilfunc k/gh-aw/gh-aw/.g/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet config mption-report.lo-bool bash (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/compile /usr/bin/git 5206-24758/test-git git ache/go/1.25.8/x--show-toplevel git rev-�� --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git 5206-24758/test-ls ../../../**/*.js-lh 1/x64/bin/node git (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv verutil.go verutil_test.go cfg ./../.prettieriggit show /usr/bin/git ache/go/1.25.8/x64/pkg/tool/linu-buildtags -c "prettier" --write '**/*.cjs' '*-errorsas git cfg k/gh-aw/gh-aw config r.lock.yml ache/go/1.25.8/x64/pkg/tool/linu-tests (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw/.g-errorsas rev-parse x_amd64/vet k/gh-aw/gh-aw/.g/usr/lib/git-core/git rev-parse me: String!) { for-each-ref x_amd64/vet -1 '**/*.ts' '**/*.json' --ignore-pgo1.25.8 /usr/bin/gh x_amd64/vet k/gh-aw/gh-aw/.ggit -f ed } } x_amd64/vet (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw/.g-p git x_amd64/vet l rev-parse DiscussionsEnablxterm-color x_amd64/vet -C '**/*.ts' '**/*.-c=4 rev-parse x_amd64/vet k/gh-aw/gh-aw/.ggit config me: String!) { /home/REDACTED/work/gh-aw/gh-aw/pkg/gitutil/gitutil.go x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw/.github/workflows -f x_amd64/vet -f owner=github DiscussionsEnablxterm-color x_amd64/vet 7300�� k/gh-aw/gh-aw -f x_amd64/vet -f owner=github -f x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv ithub/workflows ghcr.io/github/s-w x_amd64/vet l rev-parse DiscussionsEnabl--show-toplevel x_amd64/vet _bra�� k/gh-aw/gh-aw rev-parse x_amd64/vet xterm-color (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv ithub/workflows git x_amd64/vet l rev-parse ed } } x_amd64/vet 1/x6�� xterm-color git x_amd64/vet /home/REDACTED/worgit config repository(owne--get x_amd64/vet (http block)
  • https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
    • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv se 192944/b027/vet.cfg ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet k/gh-aw/gh-aw bash me: String!) { --show-toplevel ache/go/1.25.8/x64/pkg/tool/linu-trimpath ranc�� se 192944/b090/vet.cfg cfg ithub/workflows -f r: $owner, name:xterm-color ache/go/1.25.8/x64/pkg/tool/linu-goversion (http block)
  • https://api.github.com/repos/nonexistent/repo/actions/runs/12345
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion rkflow/js/**/*.jgit config erignore 64/pkg/tool/linux_amd64/vet (http block)
  • https://api.github.com/repos/owner/repo/actions/workflows
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo /usr/bin/git remote.origin.ur/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet rev-parse kflows/repo-tree-bool git ules�� k/gh-aw/gh-aw/.g-errorsas git ex.lock.yml l config kflows/smoke-ope--show-toplevel git (http block)
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo kflows/daily-doc-nilfunc -f owner=github -f git rev-�� --show-toplevel git me: String!) { -nilfunc ithub/workflows rev-parse /usr/bin/git /usr/bin/gh (http block)
    • Triggering command: /usr/bin/gh gh workflow list --repo owner/repo --json name,path,state 64/pkg/tool/linux_amd64/compile /../../.prettiergit erignore .lock.yml 64/pkg/tool/linux_amd64/compile (http block)
  • https://api.github.com/repos/test-owner/test-repo/actions/secrets
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name json' --ignore-p-errorsas rev-parse /home/REDACTED/.co-nilfunc k/gh-aw/gh-aw/.g/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet show r: $owner, name:-unreachable=false bash ules�� k/gh-aw/gh-aw node (http block)
  • https://api.github.com/repos/test/repo
    • Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch 4259795361/custom/workflows rev-parse ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet ./../.prettieriggit -f kflows/semantic---show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)

If you need me to access, download, or install something from one of these locations, you can either:

…-audit-base

- Replace daily-audit-discussion.md + reporting.md imports with daily-audit-base.md
  in 24 workflows, preserving title-prefix and expires parameters
- Run make recompile to regenerate all .lock.yml files
- New OTEL secrets (GH_AW_OTEL_ENDPOINT, GH_AW_OTEL_HEADERS) are expected and safe,
  coming from shared/observability-otlp.md bundled in daily-audit-base.md

Affected workflows: blog-auditor, claude-code-user-docs-review, copilot-agent-analysis,
copilot-pr-merged-report, copilot-pr-nlp-analysis, copilot-pr-prompt-analysis,
copilot-session-insights, copilot-token-audit, delight, developer-docs-consolidator,
docs-noob-tester, example-workflow-analyzer, github-mcp-structural-analysis,
github-mcp-tools-report, lockfile-stats, mcp-inspector, repo-audit-analyzer,
repository-quality-improver, safe-output-health, schema-consistency-checker,
sergo, terminal-stylist, typist, weekly-issue-summary

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/826dddc1-353b-48e0-969f-05ffaaf66abb

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot AI changed the title [WIP] Refactor workflows to migrate 29 imports to daily-audit-base Migrate 24 workflows from daily-audit-discussion + reporting to daily-audit-base Apr 23, 2026
Copilot AI requested a review from pelikhan April 23, 2026 19:58
@pelikhan pelikhan marked this pull request as ready for review April 23, 2026 20:45
Copilot AI review requested due to automatic review settings April 23, 2026 20:45
@pelikhan pelikhan merged commit 584235b into main Apr 23, 2026
19 checks passed
@pelikhan pelikhan deleted the copilot/refactor-migrate-29-workflows branch April 23, 2026 20:45
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR migrates a set of agentic workflow markdown definitions from individually importing shared/daily-audit-discussion.md + shared/reporting.md to using the consolidated shared/daily-audit-base.md (which bundles both and adds OTLP observability), and regenerates the compiled .lock.yml workflows accordingly.

Changes:

  • Updated multiple workflow .md files to replace the two-import block with a single shared/daily-audit-base.md import while preserving title-prefix / expires.
  • Regenerated corresponding workflow .lock.yml files (manifest/env now include OTLP observability wiring, masking steps, and otel.jsonl artifact upload).
Show a summary per file
File Description
.github/workflows/weekly-issue-summary.md Switches to daily-audit-base import.
.github/workflows/weekly-issue-summary.lock.yml Recompiled workflow; adds OTLP env/masking/config and artifact paths.
.github/workflows/typist.md Switches to daily-audit-base import.
.github/workflows/terminal-stylist.md Switches to daily-audit-base import.
.github/workflows/terminal-stylist.lock.yml Recompiled workflow; adds OTLP env/masking/config and artifact paths.
.github/workflows/sergo.md Switches to daily-audit-base import.
.github/workflows/schema-consistency-checker.md Switches to daily-audit-base import.
.github/workflows/schema-consistency-checker.lock.yml Recompiled workflow; adds OTLP env/masking/config and artifact paths.
.github/workflows/safe-output-health.md Switches to daily-audit-base import.
.github/workflows/repository-quality-improver.md Switches to daily-audit-base import.
.github/workflows/repo-audit-analyzer.md Switches to daily-audit-base import.
.github/workflows/repo-audit-analyzer.lock.yml Recompiled workflow; adds OTLP env/masking/config and artifact paths.
.github/workflows/mcp-inspector.md Switches to daily-audit-base import.
.github/workflows/lockfile-stats.md Switches to daily-audit-base import.
.github/workflows/lockfile-stats.lock.yml Recompiled workflow; adds OTLP env/masking/config and artifact paths.
.github/workflows/github-mcp-tools-report.md Switches to daily-audit-base import.
.github/workflows/github-mcp-tools-report.lock.yml Recompiled workflow; adds OTLP env/masking/config and artifact paths.
.github/workflows/github-mcp-structural-analysis.md Switches to daily-audit-base import.
.github/workflows/example-workflow-analyzer.md Switches to daily-audit-base import.
.github/workflows/example-workflow-analyzer.lock.yml Recompiled workflow; adds OTLP env/masking/config and artifact paths.
.github/workflows/docs-noob-tester.md Switches to daily-audit-base import.
.github/workflows/docs-noob-tester.lock.yml Recompiled workflow; adds OTLP env/masking/config and artifact paths.
.github/workflows/developer-docs-consolidator.md Switches to daily-audit-base import.
.github/workflows/delight.md Switches to daily-audit-base import.
.github/workflows/delight.lock.yml Recompiled workflow; adds OTLP env/masking/config and artifact paths.
.github/workflows/copilot-token-audit.md Switches to daily-audit-base import.
.github/workflows/copilot-session-insights.md Switches to daily-audit-base import.
.github/workflows/copilot-pr-prompt-analysis.md Switches to daily-audit-base import.
.github/workflows/copilot-pr-prompt-analysis.lock.yml Recompiled workflow; adds OTLP env/masking/config and artifact paths.
.github/workflows/copilot-pr-nlp-analysis.md Switches to daily-audit-base import.
.github/workflows/copilot-pr-merged-report.md Switches to daily-audit-base import.
.github/workflows/copilot-agent-analysis.md Switches to daily-audit-base import.
.github/workflows/copilot-agent-analysis.lock.yml Recompiled workflow; adds OTLP env/masking/config and artifact paths.
.github/workflows/claude-code-user-docs-review.md Switches to daily-audit-base import.
.github/workflows/claude-code-user-docs-review.lock.yml Recompiled workflow; adds OTLP env/masking/config and artifact paths.
.github/workflows/blog-auditor.md Switches to daily-audit-base import.
.github/workflows/blog-auditor.lock.yml Recompiled workflow; adds OTLP env/masking/config and artifact paths.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 48/48 changed files
  • Comments generated: 12

Comment on lines +820 to +823
GH_AW_SECRET_NAMES: 'GH_AW_GITHUB_MCP_SERVER_TOKEN,GH_AW_GITHUB_TOKEN,GH_AW_OTEL_ENDPOINT,GITHUB_TOKEN'
SECRET_GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
SECRET_GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}
SECRET_GH_AW_OTEL_ENDPOINT: ${{ secrets.GH_AW_OTEL_ENDPOINT }}
Comment on lines +858 to +861
GH_AW_SECRET_NAMES: 'GH_AW_GITHUB_MCP_SERVER_TOKEN,GH_AW_GITHUB_TOKEN,GH_AW_OTEL_ENDPOINT,GITHUB_TOKEN'
SECRET_GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
SECRET_GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}
SECRET_GH_AW_OTEL_ENDPOINT: ${{ secrets.GH_AW_OTEL_ENDPOINT }}
Comment on lines +836 to +839
GH_AW_SECRET_NAMES: 'GH_AW_GITHUB_MCP_SERVER_TOKEN,GH_AW_GITHUB_TOKEN,GH_AW_OTEL_ENDPOINT,GITHUB_TOKEN'
SECRET_GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
SECRET_GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}
SECRET_GH_AW_OTEL_ENDPOINT: ${{ secrets.GH_AW_OTEL_ENDPOINT }}
Comment on lines +801 to +805
GH_AW_SECRET_NAMES: 'COPILOT_GITHUB_TOKEN,GH_AW_GITHUB_MCP_SERVER_TOKEN,GH_AW_GITHUB_TOKEN,GH_AW_OTEL_ENDPOINT,GITHUB_TOKEN'
SECRET_COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
SECRET_GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
SECRET_GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}
SECRET_GH_AW_OTEL_ENDPOINT: ${{ secrets.GH_AW_OTEL_ENDPOINT }}
Comment on lines +902 to +906
GH_AW_SECRET_NAMES: 'ANTHROPIC_API_KEY,GH_AW_GITHUB_MCP_SERVER_TOKEN,GH_AW_GITHUB_TOKEN,GH_AW_OTEL_ENDPOINT,GITHUB_TOKEN'
SECRET_ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
SECRET_GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
SECRET_GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}
SECRET_GH_AW_OTEL_ENDPOINT: ${{ secrets.GH_AW_OTEL_ENDPOINT }}
Comment on lines +903 to +907
GH_AW_SECRET_NAMES: 'ANTHROPIC_API_KEY,GH_AW_GITHUB_MCP_SERVER_TOKEN,GH_AW_GITHUB_TOKEN,GH_AW_OTEL_ENDPOINT,GITHUB_TOKEN'
SECRET_ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
SECRET_GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
SECRET_GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}
SECRET_GH_AW_OTEL_ENDPOINT: ${{ secrets.GH_AW_OTEL_ENDPOINT }}
Comment on lines +817 to +821
GH_AW_SECRET_NAMES: 'COPILOT_GITHUB_TOKEN,GH_AW_GITHUB_MCP_SERVER_TOKEN,GH_AW_GITHUB_TOKEN,GH_AW_OTEL_ENDPOINT,GITHUB_TOKEN'
SECRET_COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
SECRET_GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
SECRET_GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}
SECRET_GH_AW_OTEL_ENDPOINT: ${{ secrets.GH_AW_OTEL_ENDPOINT }}
Comment on lines +834 to +838
GH_AW_SECRET_NAMES: 'ANTHROPIC_API_KEY,GH_AW_GITHUB_MCP_SERVER_TOKEN,GH_AW_GITHUB_TOKEN,GH_AW_OTEL_ENDPOINT,GITHUB_TOKEN'
SECRET_ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
SECRET_GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
SECRET_GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}
SECRET_GH_AW_OTEL_ENDPOINT: ${{ secrets.GH_AW_OTEL_ENDPOINT }}
Comment on lines +802 to +806
GH_AW_SECRET_NAMES: 'COPILOT_GITHUB_TOKEN,GH_AW_GITHUB_MCP_SERVER_TOKEN,GH_AW_GITHUB_TOKEN,GH_AW_OTEL_ENDPOINT,GITHUB_TOKEN'
SECRET_COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
SECRET_GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
SECRET_GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}
SECRET_GH_AW_OTEL_ENDPOINT: ${{ secrets.GH_AW_OTEL_ENDPOINT }}
Comment on lines +854 to +858
GH_AW_SECRET_NAMES: 'ANTHROPIC_API_KEY,GH_AW_GITHUB_MCP_SERVER_TOKEN,GH_AW_GITHUB_TOKEN,GH_AW_OTEL_ENDPOINT,GITHUB_TOKEN'
SECRET_ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
SECRET_GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }}
SECRET_GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}
SECRET_GH_AW_OTEL_ENDPOINT: ${{ secrets.GH_AW_OTEL_ENDPOINT }}
@github-actions github-actions Bot mentioned this pull request Apr 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[refactoring] Migrate 29 workflows from daily-audit-discussion + reporting to shared/daily-audit-base.md

3 participants