fix: include pull_request_review in reaction/status-comment conditions by Copilot · Pull Request #30354 · github/gh-aw

Copilot · 2026-05-05T12:58:24Z

buildReactionLikeCondition was missing pull_request_review from its event allowlist, so workflows triggered by that event silently skipped both the eyes 👀 reaction step and the run-started activation comment — leaving users with no signal that the workflow had picked up their review.

Changes

pkg/workflow/expression_builder.go — adds pull_request_review to the includePullRequests branch of buildReactionLikeCondition, behind the same not-from-fork guard already used for pull_request:

if includePullRequests {
    terms = append(terms, BuildEventTypeEquals("pull_request_review_comment"))

    pullRequestCondition := &AndNode{
        Left:  BuildEventTypeEquals("pull_request"),
        Right: BuildNotFromFork(),
    }
    terms = append(terms, pullRequestCondition)

    pullRequestReviewCondition := &AndNode{
        Left:  BuildEventTypeEquals("pull_request_review"),
        Right: BuildNotFromFork(),
    }
    terms = append(terms, pullRequestReviewCondition)
}

github.event.pull_request.head.repo.id is populated on pull_request_review payloads, so the existing fork-guard expression works without modification. Both BuildReactionConditionForTargets and BuildStatusCommentCondition call through to this function, so both the reaction and comment steps are fixed in one place.

pkg/workflow/expressions_test.go — adds tests asserting pull_request_review is included (with fork guard) when includePullRequests=true and excluded when false, for both condition builders.
Lock files — all 214 compiled .lock.yml files regenerated to reflect the updated if: expressions.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw g/workflow/actioapi g/workflow/actio/repos/actions/github-script/git/ref/tags/v9 x_amd64/vet g/wo�� g/workflow/action_sha_checker_in-errorsas rty x_amd64/vet g/workflow/activgh g/workflow/activapi g/workflow/activ/repos/actions/github-script/git/ref/tags/v9 x_amd64/vet (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw flow (http block)
https://api.github.com/orgs/test-owner/actions/secrets
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name ithub/workflows --jq bject.type] | @tsv n_sha_checker_in/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/compile n_sha_checker_te-o ed } } gh api js/**/*.json' ---p --jq sv omment_target_regit omment_target_re-C n-dir/bash infocmp (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 9FX53sm1OTZ6jdpo--jq sv 0410505/b444/_pkgit -buildtags g_.a git rev-�� --show-toplevel infocmp /usr/bin/git mTmY/X14dOUz2TyCgh l /usr/lib/git-cor/repos/actions/github-script/git/ref/tags/v9 git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 docker (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv 1442-20043/test-858763442/.github/workflows bash 1/x64/bin/node ithub/workflows (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel infocmp /usr/bin/git xterm-color /tmp/go-build360rev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git /tmp/TestGuardPogit config /opt/hostedtoolc--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv k/_tool infocmp /usr/bin/infocmp tags/v6 infocmp sv infocmp -1 xterm-color infocmp /home/REDACTED/.local/bin/node xterm-color ache/go/1.25.8/xrev-parse /usr/bin/infocmp--show-toplevel node (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv ew (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv ithub/workflows 0976304/b209/vet.cfg ache/go/1.25.8/x64/pkg/tool/linu-f tierignore (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv se 0976304/b217/vet.cfg ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet tierignore (http block)
https://api.github.com/repos/actions/download-artifact/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/download-artifact/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv copilot/fix-activation-comment-pull-request-review on $name) { hasDiscussionsEnabled } } /../../.prettiergit erignore (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/download-artifact/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv copilot/fix-activation-comment-pull-request-review on r: $owner, name: $name) { hasDiscussionsEnabled } } /../../.prettiergit erignore (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv /repos/actions/setup-node/git/ref/tags/v4 --jq /usr/bin/git test/concurrent-git /usr/bin/gh /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git /tmp/gh-aw-test-git rev-parse (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv ew (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv d -n 10 (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9.0.0
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw -buildtags kflows/daily-architecture-diagram.lock.yml -errorsas -ifaceassert -nilfunc /usr/bin/gh api h ../../../.prettierignore -f 1/x64/bin/node -f owner=github -f git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv -bool -buildtags (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv go1.25.8 -c=4 -nolocalimports -importcfg /tmp/go-build3600410505/b395/importcfg -pack /tmp/go-build3600410505/b395/_testmain.go /pre�� k/gh-aw/gh-aw show kflows/daily-model-inventory.lock.yml (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linu-f /usr/bin/git 2774229843 --write 64/pkg/tool/linu/repos/actions/github-script/git/ref/tags/v9 git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/compile /usr/bin/git g_.a scripts/**/*.js 0410505/b436/rep--show-toplevel git (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv test/concurrent-image:v1.0.0 /usr/bin/gh /usr/bin/git Gitbranch_with_hgit Gitbranch_with_hrev-parse x_amd64/link git -C /tmp/gh-aw-test-runs/20260505-131442-20043/test-2774229843 rev-parse (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 npx sv SameOutput421396infocmp **/*.cjs e/git-upload-pacxterm-color infocmp -1 xterm-color 0410505/b476/imp--jq /usr/bin/git k/gh-aw/gh-aw/tmgit scripts/**/*.js 0410505/b432/par--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 /opt/hostedtoolcache/go/1.25.8/x--jq bject.type] | @tsv ons-test23779935git -importcfg /usr/bin/git git rev-�� /ref/tags/v9 git sv /tmp/gh-aw-test-infocmp rev-parse _id":200}] gh (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv ew (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv se 0976304/b214/vet.cfg me: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } tierignore (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv user.name Test User ache/node/24.14.1/x64/bin/node go1.25.8 -c=4 -nolocalimports /usr/lib/git-core/git t-20�� k/gh-aw/gh-aw/.github/workflows/ace-editor.md --format=%(objectname) /usr/bin/git ithub/workflows --jq (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv 1442-20043/test-3475578572 docker /usr/bin/git ithub/workflows est sh git -C /tmp/shared-actions-test2377993525 config /usr/bin/git remote.origin.urgit rev-parse flow.lock.yml git (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv -silent >/dev/nu-errorsas (http block)
https://api.github.com/repos/aws-actions/configure-aws-credentials/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git ithub-script/gitgit rev-parse bject.type] | @t--show-toplevel git rev-�� --show-toplevel node /usr/bin/gh ub/gh-aw.git /usr/bin/gh ng.md gh (http block)
- Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/node/24.14.1/x64/bin/node /usr/bin/git uts.branch rev-parse /opt/hostedtoolc/repos/actions/github-script/git/ref/tags/v9 git rev-�� /ref/tags/v9 /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet sv mpleWorkflow2812git l /usr/bin/git gh (http block)
https://api.github.com/repos/azure/login/git/ref/tags/v2
- Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel node /usr/bin/git /tmp/TestHashCongit 0410505/b460/_terev-parse /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linuowner/test-repo /usr/bin/infocmp /tmp/go-build360infocmp l /usr/bin/git infocmp (http block)
https://api.github.com/repos/docker/login-action/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/TestGuardPogit config /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linuowner/host-repo /usr/bin/git /tmp/go-build360infocmp -trimpath om/upstream/repoxterm-color git (http block)
https://api.github.com/repos/docker/metadata-action/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv te 'scripts/**/*-f .cfg r: $owner, name:-f (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv te 'scripts/**/*.js' --ignore-path .prettierigno-errorsas .cfg 64/pkg/tool/linux_amd64/vet (http block)
https://api.github.com/repos/docker/setup-buildx-action/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv te 'scripts/**/*.js' --ignore-pa-f .cfg 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv FETCH_HEAD .cfg 64/pkg/tool/linux_amd64/vet r (http block)
https://api.github.com/repos/github/gh-aw
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch se 0976304/b266/vet.cfg k.yml (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/go/1.25.8/x^remote\..*\.gh-resolved$ /usr/bin/git 2774229843 ache/go/1.25.8/xapi 0410505/b425/imp/repos/actions/github-script/git/ref/tags/v9 git rev-�� --show-toplevel ocNu6uh6Xsdg3/R3iUEqf5PFeb3NCkL0nF/2rw-RdHCw_apH-goversion /usr/bin/git '/tmp/TestParseDinfocmp '/tmp/TestParseD-1 r: $owner, name:xterm-color git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv /home/REDACTED/work/gh-aw/gh-aw/.github/workflows/--log-target -goversion ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -c=4 -nolocalimports ed } } ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet conf�� user.name Test User /usr/bin/git ub/workflows show x_amd64/compile git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv --get remote.origin.url /usr/bin/git th .prettierignogit --jq _modules/.bin/no--show-toplevel git conf�� --get remote.origin.url /usr/bin/git ithub/workflows --jq x_amd64/compile git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-04-28 --local 64/pkg/tool/linuuser.email git -C /home/REDACTED/work/gh-aw/gh-aw/.github/workflows erena-mcp-server:latest /usr/bin/git rite '**/*.cjs' git .cfg 64/pkg/tool/linu-m git (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-04-05 --local $name) { hasDiscussionsEnabl/tmp/gh-aw-test-runs/20260505-131442-20043/test-3472599466/.github/workflows docker 8d51�� LsRemoteWithRealGitmaster_branchremote.origin.url LsRemoteWithRealGitmaster_branch1350254984/001' (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-02-04 owner=github -f git itcu�� 24436360.go show 64/pkg/tool/linux_amd64/cgo rite '**/*.cjs' git .cfg DiscussionsEnabl-b 64/pkg/tool/linufeature-branch (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name -f bin/node l owner=github -f /usr/bin/gh ache�� graphql -f k -f owner=github -f erignore (http block)
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 -f es/.bin/sh nore owner=github -f git -C 6510/001/stability-test.md show nfig/composer/vendor/bin/sh -v origin $name) { has--show-toplevel ortcfg (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name --jq /usr/bin/git ignore .cfg r: $owner, name:-v git -C rite '**/*.cjs' '**/*.ts' '**/*.json' --ignore-p-c=4 show k/_temp/uv-python-dir/node copilot/fix-actigit on ache/go/1.25.8/x--git-dir gh (http block)
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 rev-parse k/gh-aw/gh-aw/node_modules/.bin/node FETCH_HEAD setup/js/node_moconfig 64/pkg/tool/linu--get-regexp gh ache�� 3101053498 --jq /usr/bin/infocmp copilot/fix-actigit on r: $owner, name: $name) { hastesting.testBinary=1 ortcfg (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1234567890
- Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, 10494386/001' 10494386/001' me: String!) { ../../../.prettierignore k/_temp/copilot-/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/compile (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name 64/pkg/tool/linux_amd64/vet x_amd64/compile ignore .cfg 64/pkg/tool/linu--get-regexp x_amd64/compile api rite '**/*.cjs' '**/*.ts' '**/*.remote.origin.url --jq ache/uv/0.11.9/x86_64/node copilot/fix-actigit on $name) { has--show-toplevel infocmp (http block)
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 64/pkg/tool/linu-- es/.bin/node FETCH_HEAD .cfg 64/pkg/tool/linuuser.email git ache�� /home/REDACTED/work/gh-aw/gh-aw/.github/workflows rev-parse .cfg git status --porgit on ache/go/1.25.8/x--show-toplevel erignore (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name 64/pkg/tool/linuconfig k/gh-aw/gh-aw/actions/setup/js/n-buildmode=exe nore .cfg 64/pkg/tool/linu--show-toplevel infocmp -1 te '**/*.cjs' '**/*.ts' '**/*.json' --ignore-patgo1.25.8 64/pkg/tool/linux_amd64/vet .cfg git status --porgit (http block)
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 64/pkg/tool/linuconfig in/sh nore onpins .cfg /usr/bin/gh api 1442-20043/test-source-field-var-p -f p/bin/sh -f owner=github -f ortcfg (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name --jq 64/pkg/tool/linux_amd64/vet FETCH_HEAD .cfg 64/pkg/tool/linu--show-toplevel 64/pkg/tool/linux_amd64/vet ache�� 6510/001/stability-test.md --jq .cfg git status --porgit (http block)
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 --jq ache/node/24.14.1/x64/lib/node_modules/npm/node_-buildmode=exe nore tdrain .cfg infocmp -1 6510/001/stability-test.md ache/go/1.25.8/xrev-parse tnet/tools/sh 0976304/b076/_pk/opt/hostedtoolcache/node/24.14.1/x64/bin/node origin $name) { hasDiscussionsEnabl/home/REDACTED/work/gh-aw/gh-aw/.github/workflows/archie.md ortcfg (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name 64/pkg/tool/linux_amd64/vet x_amd64/compile FETCH_HEAD .cfg 64/pkg/tool/linu--show-toplevel x_amd64/compile ache�� xterm-color 64/pkg/tool/linux_amd64/vet .cfg git status --porgit /rg ache/go/1.25.8/x--git-dir erignore (http block)
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 show ortcfg.link nore (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name rev-parse x_amd64/compile nore .cfg 64/pkg/tool/linu--show-toplevel x_amd64/compile -C te '**/*.cjs' '**/*.ts' '**/*.json' --ignore-pat--detach rev-parse k git status --porgit (http block)
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 64/pkg/tool/linu-f k/_temp/uv-python-dir/sh nore onpins_test ache/go/1.25.8/x--show-toplevel gh api 1442-20043/test-source-field-var-c=4 --jq ow.lock.yml 0976304/b355/_pkgit origin ache/go/1.25.8/x--show-toplevel ortcfg (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path k/gh-aw/gh-aw/.github/workflows rev-parse ml (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 r x_amd64/vet /usr/bin/gh api Gitbranch_with_hyphen1729218150/001' Gitbranch_with_hyphen1729218150/001' x_amd64/link -f owner=github DiscussionsEnabl-bool x_amd64/link (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 .cfg DiscussionsEnabl--show-toplevel 64/pkg/tool/linux_amd64/link -1 eutil.test 64/pkg/tool/linu-f ortcfg.link om/stretchr/testgit om/stretchr/testrev-parse ache/go/1.25.8/x--show-toplevel WX7yb940DSvuWvV_iU/CuK_RBMaGNLGUTest User (http block)
https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md
- Triggering command: /tmp/go-build3600410505/b404/cli.test /tmp/go-build3600410505/b404/cli.test -test.testlogfile=/tmp/go-build3600410505/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true -errorsas -ifaceassert -nilfunc ./gh-aw comp�� --validate --verbose /usr/bin/gh --stats (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv 3535446271/001 sRemoteWithRealGitmaster_branch1-c=4 g_.a /ref/tags/v9 0976304/b005/vet-1 ode-gyp-bin/sh git k/gh�� ai-moderator.md on 1/x64/bin/node /../../.prettierinfocmp erignore ache/go/1.25.8/xxterm-color sh (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv -c=4 -nolocalimports -importcfg /tmp/go-build3600410505/b459/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/timeutil/spec_test.go git -C k/gh-aw/gh-aw/.g-p rev-parse x_amd64/compile */*.ts' '**/*.jsnode --local x_amd64/vet x_amd64/compile (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv 585308142 erena-mcp-server:latest ode_modules/.bin/sh (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw show es/.bin/sh o actions/setup-/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/link (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv xterm-color x_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw/.g-c=4 show (http block)
https://api.github.com/repos/google-github-actions/auth/git/ref/tags/v2
- Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/TestGuardPogit config ps git rev-�� --show-toplevel ps /usr/bin/git git l 64/pkg/tool/linu--show-toplevel git (http block)
https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv 3535446271/001 config k/gh-aw/gh-aw/actions/setup/js/node_modules/.bin/node remote.origin.ur/usr/bin/git 0976304/b046/vetconfig .cfg infocmp k/gh�� 1442-20043/test-1548748789/.github/workflows on ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /../../.prettiergit erignore me: String!) { --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion te '../../../**/git %H %ct %D (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo (http block)
- Triggering command: /usr/bin/gh gh workflow list --repo owner/repo --json name,path,state (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name go1.25.8 -c=4 -nolocalimports -importcfg /tmp/go-build3600410505/b436/importcfg -pack /tmp/go-build3600410505/b436/_testmain.go api js/**/*.json' ---s -f me: String!) { -buildmode=exe -f owner=github -f infocmp (http block)
https://api.github.com/repos/test/repo
- Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch t289153061 rev-parse .yml se 0976304/b060/vetinit erignore git -C te '../../../**/*.json' '!../../../pkg/workflow/remote.origin.url rev-parse 64/pkg/tool/linux_amd64/compile ithub/workflows **/*.cjs .lock.yml 64/pkg/tool/linuREDACTED (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/2e22d9f2-4ac8-4ba8-b8f7-376f40213e92 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot

Pull request overview

This PR fixes missing activation signaling (👀 reaction and run-started status comment) for workflows triggered by the pull_request_review event by including pull_request_review in the reaction/status-comment condition allowlist, protected by the existing not-from-fork guard.

Changes:

Extend buildReactionLikeCondition to allow pull_request_review when includePullRequests=true, guarded by BuildNotFromFork().
Add/extend unit tests to cover inclusion/exclusion of pull_request_review for both reaction and status-comment condition builders.
Regenerate workflow .lock.yml files so generated if: expressions include pull_request_review with the fork guard.

Show a summary per file

File	Description
pkg/workflow/expression_builder.go	Adds `pull_request_review` to the pull-request branch of the reaction/status-comment condition builder with the existing fork guard.
pkg/workflow/expressions_test.go	Adds tests for including/excluding `pull_request_review` in rendered conditions.
.github/workflows/workflow-generator.lock.yml	Regenerated generated `if:` condition to include guarded `pull_request_review`.
.github/workflows/unbloat-docs.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/tidy.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/smoke-update-cross-repo-pr.lock.yml	Regenerated generated `if:` condition to include guarded `pull_request_review`.
.github/workflows/smoke-test-tools.lock.yml	Regenerated generated `if:` condition to include guarded `pull_request_review`.
.github/workflows/smoke-temporary-id.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/smoke-service-ports.lock.yml	Regenerated generated `if:` condition to include guarded `pull_request_review`.
.github/workflows/smoke-project.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/smoke-pi.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/smoke-opencode.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/smoke-multi-pr.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/smoke-gemini.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/smoke-crush.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/smoke-create-cross-repo-pr.lock.yml	Regenerated generated `if:` condition to include guarded `pull_request_review`.
.github/workflows/smoke-copilot.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/smoke-copilot-arm.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/smoke-codex.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review` (plus regenerated heredoc IDs).
.github/workflows/smoke-claude.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/smoke-agent-scoped-approved.lock.yml	Regenerated generated `if:` condition to include guarded `pull_request_review`.
.github/workflows/smoke-agent-public-none.lock.yml	Regenerated generated `if:` condition to include guarded `pull_request_review`.
.github/workflows/smoke-agent-public-approved.lock.yml	Regenerated generated `if:` condition to include guarded `pull_request_review`.
.github/workflows/smoke-agent-all-none.lock.yml	Regenerated generated `if:` condition to include guarded `pull_request_review`.
.github/workflows/smoke-agent-all-merged.lock.yml	Regenerated generated `if:` condition to include guarded `pull_request_review`.
.github/workflows/security-review.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/scout.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/q.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/pr-nitpick-reviewer.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/poem-bot.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/plan.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/pdf-summary.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/mergefest.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/grumpy-reviewer.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review` (plus regenerated heredoc IDs).
.github/workflows/dev.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/craft.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/cloclo.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/ci-doctor.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/changeset.lock.yml	Regenerated generated `if:` condition to include guarded `pull_request_review`.
.github/workflows/brave.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/archie.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.
.github/workflows/ace-editor.lock.yml	Regenerated generated `if:` conditions to include guarded `pull_request_review`.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comments suppressed due to low confidence (1)

pkg/workflow/expressions_test.go:188

Same issue as the reaction-condition test: checking for the fork-guard string alone doesn’t prove it is applied to the pull_request_review term (it may be present due to the guarded pull_request term). Tighten this assertion to match the specific pull_request_review + not-from-fork sub-expression.

Files reviewed: 42/42 changed files
Comments generated: 2

+func TestBuildReactionConditionForTargetsIncludesPullRequestReview(t *testing.T) {
+	result := BuildReactionConditionForTargets(true, true, true)
+	rendered := result.Render()
+
+	if !strings.Contains(rendered, "github.event_name == 'pull_request_review'") {
+		t.Errorf("Expected pull_request_review event to be included when pull request reactions are enabled, got: %s", rendered)
+	}
+	// Verify the fork guard is applied alongside pull_request_review
+	if !strings.Contains(rendered, "github.event.pull_request.head.repo.id == github.repository_id") {
+		t.Errorf("Expected fork guard to be included for pull_request_review, got: %s", rendered)
+	}


+func TestBuildStatusCommentConditionExcludesPullRequestReview(t *testing.T) {
+	result := BuildStatusCommentCondition(true, false, true)
+	rendered := result.Render()
+
+	if strings.Contains(rendered, "github.event_name == 'pull_request_review'") {
+		t.Errorf("Expected pull_request_review event to be excluded when pull request reactions are disabled, got: %s", rendered)
+	}


pelikhan · 2026-05-05T13:52:31Z

@copilot review all comments

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/e1826d79-8c80-4704-a8e6-789b4a525f55 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-05-05T14:02:16Z

@copilot review all comments

Addressed both reviewer comments in ca41155:

Weak fork-guard assertions (lines 165–175 and 178): Tests now assert the full combined sub-expression github.event_name == 'pull_request_review' && github.event.pull_request.head.repo.id == github.repository_id rather than just the fork-guard string, so the test would catch if pull_request_review were added without the guard.
Misleading error message (lines 191–197): Updated the failure message in TestBuildStatusCommentConditionExcludesPullRequestReview from "pull request reactions are disabled" to "includePullRequests is false" to accurately reflect the status-comment context.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh gh repo view --json owner,name --jq .owner.login + "/" + .name /home/REDACTED/.dotnet/tools/git gpg.program (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh gh repo view owner/repo conf�� --local credential.username 1/x64/bin/node nore (http block)
https://api.github.com/orgs/test-owner/actions/secrets
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name h ../../../.pret.prettierignore (http block)
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name h ../../../.pret--log-level=error --jq bject.type] | @tsv --show-toplevel gh /usr/bin/infocmp--write git rev-�� w/js/**/*.json' --ignore-path infocmp /usr/bin/infocmp /ref/tags/v9 git sv infocmp (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 sh sv "prettier" --wrigit (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv WorkflowFiles_WithImports3269172812/001 origin /usr/bin/git l (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv ExpressionCompiledOutput599998681/001 (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git ithub-script/gitgit show bject.type] | @t--show-toplevel git rev-�� --show-toplevel git /usr/bin/git /ref/tags/v9.0.0git r-test716022986/rev-parse sv git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv k/_tool infocmp /usr/bin/infocmp tags/v6 git sv infocmp -1 xterm-color infocmp /home/REDACTED/.local/bin/node xterm-color bash /usr/bin/infocmp--show-toplevel node (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv licyTrustedUsersCompiledOutput923636492/001 -buildtags (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /tmp/TestParseDefaultBranchFromLsRemoteWithRealG--workflow /tmp/TestParseDefaultBranchFromLsRemoteWithRealGnonexistent-workflow /usr/bin/git h ../../../.pretgit (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv /repos/actions/setup-node/git/ref/tags/v4 --jq /usr/bin/git /ref/tags/v9 remote.origin.urrev-parse sv git rev-�� --show-toplevel git /usr/bin/git --show-current (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv h2635593465/001' h2635593465/001' x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv re --log-level=error (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9.0.0
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv s/data/action_pins.json and pkg/workflow/data/action_pins.json..." (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv js/**/*.json' ---errorsas (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel bash /usr/bin/git --noprofile on rkflow/js/**/*.jxterm-color git rev-�� --show-toplevel sh /usr/bin/git 5857-8735/test-9git (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 remote.origin.url sv -test.md (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 bash sv Onlymin-integritgh on rkflow/js/**/*.j/repos/actions/github-script/git/ref/tags/v9 infocmp -1 xterm-color sh /usr/bin/git 5857-8735/test-9git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 git bject.type] | @tsv --show-toplevel (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv -bool -buildtags /usr/bin/infocmp -errorsas -ifaceassert -nilfunc infocmp -1 xterm-color -tests /opt/hostedtoolcache/node/24.14.1/x64/bin/node (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv --show-toplevel (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /home/REDACTED/work/gh-aw/gh-aw/.github/workflows rev-parse /usr/bin/git (http block)
https://api.github.com/repos/aws-actions/configure-aws-credentials/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git :latest (http block)
- Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel node /usr/bin/git ons-test26630572gh (http block)
https://api.github.com/repos/azure/login/git/ref/tags/v2
- Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/gh-aw-test-git remote ps git rev-�� --show-toplevel ps /usr/bin/infocmp git --jq /opt/hostedtoolcxterm-color infocmp (http block)
https://api.github.com/repos/docker/login-action/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /ref/tags/v9.0.0git r-test716022986/rev-parse sv git rev-�� --show-toplevel git /usr/bin/git /tmp/compile-insinfocmp remote om/owner/repo.gixterm-color git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv --show-toplevel /opt/hostedtoolcconfig /usr/bin/git 5857-8735/test-2git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv f/tags/v999.999.999 (http block)
https://api.github.com/repos/github/gh-aw/actions/runs
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-04-28 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-04-05 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-02-04 (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name vation-comment-pull-request-review 64/pkg/tool/linux_amd64/asm user.name (http block)
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 --local 64/pkg/tool/linux_amd64/vet user.email (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name git bject.type] | @tsv ithub-script/git/usr/bin/git git bject.type] | @t--get-regexp git tion�� edOutput1630333414/001 git son ignore gh /usr/bin/git infocmp (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name --local de_modules/.bin/node credential.userngit (http block)
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 vation-comment-pull-request-review 86_64/node credential.userngit (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name --jq (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1234567890
- Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, (http block)
- Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, h ../../../.pret.prettierignore infocmp /usr/bin/gh /ref/tags/v9 /opt/hostedtoolc-V=full sv gh api /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/infocmp /ref/tags/v9 gh sv infocmp (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name LsRemoteWithRealGitbranch_with_hyphen1162296977/001' ules/.bin/node credential.userngit (http block)
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 vation-comment-pull-request-review k/_temp/uv-python-dir/bash user.name (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name git bject.type] | @tsv --show-toplevel gh /usr/bin/git git tion�� y_with_repos_array_c2321681081/0remote.origin.url git son ignore git /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name vation-comment-pull-request-review nfig/composer/vendor/bin/bash user.name (http block)
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 --local 64/pkg/tool/linux_amd64/vet user.email (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name git 64/bin/node --show-toplevel git /usr/bin/git git tion�� edOutput16303334--limit git son ignore infocmp /usr/bin/gh git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name vation-comment-pull-request-review 64/pkg/tool/linux_amd64/compile user.name (http block)
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 --local sole.test user.email (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name --jq /usr/bin/git --show-toplevel 96f36f6d..HEAD /usr/bin/git git rev-�� mpiledOutput2125910574/001 git nfig/composer/vendor/bin/sh --show-toplevel infocmp /usr/bin/gh git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name vation-comment-pull-request-review l_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, creat--show-toplevel user.name (http block)
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 --local 64/pkg/tool/linux_amd64/vet user.email (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name git 1/x64/bin/node --show-toplevel git /usr/bin/git git tion�� edOutput1630333414/001 git son ignore git sv gh (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name vation-comment-pull-request-review 64/pkg/tool/linux_amd64/cgo user.name (http block)
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 stmain.go 64/pkg/tool/linux_amd64/vet user.email (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name git (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path h ../../../.pret.prettierignore (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 (http block)
https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md
- Triggering command: /tmp/go-build1370910113/b404/cli.test /tmp/go-build1370910113/b404/cli.test -test.testlogfile=/tmp/go-build1370910113/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true (http block)
- Triggering command: /tmp/go-build1877882854/b404/cli.test /tmp/go-build1877882854/b404/cli.test -test.testlogfile=/tmp/go-build1877882854/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true --show-toplevel /bin/sh /usr/bin/git gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq /usr/bin/git --show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv 91033109 user.email sv (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv json' --ignore-path ../../../.pr**/*.json (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv ned-imports-enabled-with-body-content.md --jq /usr/bin/gh --show-toplevel git /usr/bin/git gh api th .prettierignoremote.origin.url --jq /usr/bin/git --show-toplevel (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv json' --ignore-path ../../../.pr**/*.json (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv ant-3161342508/.github/workflows (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv xterm-color git /usr/bin/infocmp --show-toplevel /usr/lib/git-cor-1 /usr/bin/git infocmp phen�� th .prettierignore --log-level=e!../../../pkg/workflow/js/**/*.json git ode_modules/.bin/node --show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv ed-imports-enabled-with-env-template-expressions-in-body.md (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv xterm-color git /usr/bin/infocmp --show-toplevel git /usr/bin/git infocmp -1 th .prettierignore --log-level=error git node --show-toplevel git (http block)
https://api.github.com/repos/google-github-actions/auth/git/ref/tags/v2
- Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git ErrorFormatting8git remote /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel l /usr/bin/git git (http block)
https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv 710423167 user.email tartedAt,updatedAt,event,headBranch,headSha,displayTitle (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion committer.email (http block)
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion son gh bject.type] | @t--git-dir git rev-�� --show-toplevel git tnet/tools/sh --show-toplevel infocmp /usr/bin/infocmp--show-toplevel git (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo -main/dist/gh-gpgsign/gh-gpgsign-linux-x86_64 ader (http block)
- Triggering command: /usr/bin/gh gh workflow list --repo owner/repo --json name,path,state e_modules/.bin/sh nore (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo /usr/bin/git heckout/git/ref/node git bject.type] | @t--write git rev-�� w/js/**/*.json' --ignore-path gh /usr/bin/gh /repos/actions/ggit --jq /usr/bin/git gh (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name h ../../../.pret--log-level=error (http block)
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name h ../../../.prettierignore git /usr/bin/git --show-toplevel infocmp /usr/bin/git git rev-�� w/js/**/*.json' --ignore-path git /usr/bin/git --show-toplevel git /usr/bin/git git (http block)
https://api.github.com/repos/test/repo
- Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch (http block)
- Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch vaScript2522275310/001/test-simple-frontmatter.md --jq h /ref/tags/v9 git sv git rev-�� efaultBranchFromLsRemoteWithRealGitmaster_branch772581965/001' efaultBranchFromLsRemoteWithRealGitmaster_branch772581965/001' k/gh-aw/gh-aw/actions/setup/js/node_modules/.bin/sh /ref/tags/v9 git sv infocmp (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Initial plan

d0735cf

Copilot AI assigned Copilot and pelikhan May 5, 2026

Copilot started work on behalf of pelikhan May 5, 2026 13:05 View session

Copilot AI linked an issue May 5, 2026 that may be closed by this pull request

Activation comment / reaction not posted for pull_request_review triggers — buildReactionLikeCondition allowlist is incomplete #30336

Closed

fix: add pull_request_review to buildReactionLikeCondition allowlist

cdf6bb8

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/2e22d9f2-4ac8-4ba8-b8f7-376f40213e92 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Fix activation comment and reaction for pull request review triggers~~ fix: include pull_request_review in reaction/status-comment conditions May 5, 2026

Copilot finished work on behalf of pelikhan May 5, 2026 13:24

Copilot AI requested a review from pelikhan May 5, 2026 13:24

pelikhan marked this pull request as ready for review May 5, 2026 13:25

Copilot AI review requested due to automatic review settings May 5, 2026 13:25

Copilot started reviewing on behalf of pelikhan May 5, 2026 13:27 View session

Copilot AI reviewed May 5, 2026

View reviewed changes

Copilot started work on behalf of pelikhan May 5, 2026 13:52 View session

test: strengthen fork-guard assertions and fix error message wording

ca41155

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/e1826d79-8c80-4704-a8e6-789b4a525f55 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan May 5, 2026 14:03

pelikhan merged commit 4f06836 into main May 5, 2026

pelikhan deleted the copilot/fix-activation-comment-pull-request-review branch May 5, 2026 14:23

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix: include pull_request_review in reaction/status-comment conditions#30354

fix: include pull_request_review in reaction/status-comment conditions#30354
pelikhan merged 3 commits intomainfrom
copilot/fix-activation-comment-pull-request-review

Copilot AI commented May 5, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

pelikhan commented May 5, 2026

Uh oh!

Copilot AI commented May 5, 2026 •

edited

Loading

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

Copilot AI commented May 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

pelikhan commented May 5, 2026

Uh oh!

Copilot AI commented May 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented May 5, 2026 •

edited

Loading

Copilot AI commented May 5, 2026 •

edited

Loading