Stabilize determine_automatic_lockdown log expectation in CJS tests

[Copilot]

The CJS failure was caused by a stale vi.fn() expectation in determine_automatic_lockdown.test.cjs: the public-repo behavior test was asserting on a specific log call instead of the behavior it was meant to validate. This made the test brittle and caused the mock expectation to fail even though the implementation path remained valid.

• Scope the log assertion to the logging test

  • Removed the "guard policy automatically applied" expectation from the output-focused public repository test.
  • Added that expectation to the dedicated logging test, where core.info calls are already the subject under test.

• Keep behavior coverage unchanged

  • The public repository behavior test still verifies the resolved outputs (min_integrity, repos, visibility) and avoids coupling to incidental logging.
  • Logging coverage remains explicit, but now lives in the test that already validates the rest of the public-repo log sequence.

// before: behavior test also asserted on an incidental info log
expect(mockCore.setOutput).toHaveBeenCalledWith("min_integrity", "approved");
expect(mockCore.info).toHaveBeenCalledWith(
  expect.stringContaining("guard policy automatically applied"),
);

// after: behavior test checks outputs; logging test checks log messages
expect(mockCore.setOutput).toHaveBeenCalledWith("min_integrity", "approved");

// in dedicated logging test
expect(mockCore.info).toHaveBeenCalledWith(
  expect.stringContaining("guard policy automatically applied"),
);

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/graphql
  • Triggering command: /usr/bin/gh gh repo view --json owner,name --jq .owner.login + "/" + .name cfg -n1 util_test --end-of-options--show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /hom�� DefaultBranchFromLsRemoteWithRealGitmain_branch2064754128/001' DefaultBranchFromLsRemoteWithRealGitmain_branch2064754128/001' ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet **/*.json --ignore-path ../../../.prettierignore rtcfg (http block)
  • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw util_test (http block)
  • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
• https://api.github.com/orgs/test-owner/actions/secrets
  • Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name file-parallelism --shard=1/4 determine_automatic_lockdown.test.cjs (http block)
  • Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name h ../../../.pret.prettierignore git sv --show-toplevel infocmp /usr/bin/git git rev-�� w/js/**/*.json' --ignore-path git /usr/bin/git --show-toplevel b097-388bf8fdcb5api /usr/bin/git git (http block)
• https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
  • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel /opt/hostedtoolcache/go/1.25.8/x5 /usr/bin/infocmp (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel sh /usr/bin/infocmp npx prettier --wgit infocmp /opt/hostedtoolc--show-toplevel infocmp -1 xterm-color /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git licyTrustedUsersgh -buildtags /usr/bin/git git (http block)
• https://api.github.com/repos/actions/checkout/git/ref/tags/v3
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 x_amd64/vet sv rite '**/*.cjs' gh cfg 64/pkg/tool/linu/repos/actions/github-script/git/ref/tags/v9 git rev-�� --show-toplevel 64/pkg/tool/linuTest User /usr/bin/git LsRemoteWithRealgit LsRemoteWithRealrev-parse 64/pkg/tool/linu--show-toplevel /usr/bin/git (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --get remote.origin.url er: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabl--show-toplevel determine_automgh git tions/setup/js/n/repos/actions/github-script/git/ref/tags/v9 git conf�� user.name Test User /usr/bin/git rd gh it git (http block)
• https://api.github.com/repos/actions/checkout/git/ref/tags/v5
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv 2251-15971/test-3810972011 /tmp/go-build407767979/b157/vet.cfg 1/x64/bin/node th .prettierignogit --local ndor/bin/sh /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet t-ha�� ithub/workflows/ai-moderator.md -buildtags ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile -errorsas -ifaceassert -nilfunc ache/go/1.25.8/x64/pkg/tool/linu4 (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel git (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel gh /usr/bin/gh /repos/actions/ggit --jq (http block)
• https://api.github.com/repos/actions/checkout/git/ref/tags/v6
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv runs/20260508-032251-15971/test-3810972011 --jq t l -nolocalimports -importcfg /usr/bin/git conf�� -aw/git/ref/tags/v2.0.0 ^remote\..*\.gh-resolved$ bject.type] | @tsv file-parallelismgit (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /tmp/TestHashConsistency_GoAndJavaScript2744801195/001/test-simple-frontmatter.md git /usr/bin/infocmp ./../pkg/workflogit origin x_amd64/vet infocmp -1 runs/20260508-032251-15971/test-1112232126 x_amd64/vet /usr/bin/git tsc --noEmit (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv waysRecompiles2469239322/001 x_amd64/vet /usr/bin/git '**/*.ts' '**/*.git --oneline x_amd64/vet git conf�� user.email test@example.com /usr/bin/git --noprofile (http block)
• https://api.github.com/repos/actions/github-script/git/ref/tags/v8
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv xterm-color git /usr/bin/git --show-toplevel x_amd64/vet /usr/bin/git git rev-�� --show-toplevel git /usr/bin/infocmp (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv xterm-color .test /usr/bin/git ithub-script/gitgh git bject.type] | @t/repos/actions/github-script/git/ref/tags/v9 git rev-�� --show-toplevel git /usr/bin/infocmp /ref/tags/v9 feature-branch sv infocmp (http block)
• https://api.github.com/repos/actions/github-script/git/ref/tags/v9
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv */*.ts' '**/*.json' --ignore-path ../../../.prettierignore commit.gpgsign rgo/bin/bash (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv --local core.hooksPath 64/bin/sh (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv cli/install.sh..." HEAD ode (http block)
• https://api.github.com/repos/actions/github-script/git/ref/tags/v9.0.0
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv */*.ts' '**/*.json' --ignore-path ../../../.pret.prettierignore gpg.program de_modules/.bin/node (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv --local commit.gpgsign bin/sh (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv -c=4 -nolocalimports -importcfg /tmp/go-build407767979/b398/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/actionpins/spec_test.go bash ode_�� file-parallelism --shard=1/4 determine_automatic_lockdown.test.cjs (http block)
• https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git orts2999638153/0infocmp /tmp/go-build407-1 1/x64/bin/node git rev-�� --show-toplevel MeIF_E5paMIS4/F6--jq /usr/bin/git ithub/workflows/git /tmp/go-build407rev-parse 767979/b441/_pkg--show-toplevel git (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/go/1.25.8/x--jq /usr/bin/git vitest run --no-infocmp gh ache/node/24.14.xterm-color git merg�� -L current (local changes) /usr/bin/git base (original) -L new (upstream) git (http block)
• https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/vet /usr/bin/git */*.json' '!../.git (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/infocmp -unreachable=falgh (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/node/24.14.1/x64/bin/node /usr/bin/git uts.enforce_all git -importcfg /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel -extld=gcc om/upstream/repoxterm-color git (http block)
• https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv f1es/1UYObWDf37qxec6Bf1es --jq (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv ErrorFormatting3983250452/001 git /usr/bin/git ./../pkg/workflogit origin x_amd64/vet git rev-�� s/test.md x_amd64/vet /usr/bin/git tsc --noEmit (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 rev-parse sv rite '../../../*git (http block)
• https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
  • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel -extld=gcc /opt/hostedtoolcache/node/24.14.1/x64/bin/node run on x_amd64/vet /opt/hostedtoolcache/node/24.14.1/x64/bin/node /tmp�� 'full-sweep (enforce_all)' x_amd64/vet /usr/bin/git erate-action-metgit (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /tmp/TestCompileUpdateDiscussionFieldEnforcement1028480562/001 remote /usr/bin/git matter-with-arragit --jq /usr/bin/infocmp--show-toplevel git rev-�� /ref/tags/v9 infocmp sv xterm-color info spy assertirev-parse 64/bin/bash git (http block)
• https://api.github.com/repos/aws-actions/configure-aws-credentials/git/ref/tags/v4
  • Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/TestGuardPogit remote clusion,workflow--show-toplevel git rev-�� --show-toplevel git /usr/bin/git --show-toplevel x_amd64/vet /usr/bin/git git (http block)
  • Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel node /usr/bin/git /tmp/TestHashStagh npm /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git /tmp/gh-aw-test-git remote /usr/bin/git git (http block)
  • Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel gh /usr/bin/git /repos/actions/ggit --jq /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git s/test.md git (http block)
• https://api.github.com/repos/azure/login/git/ref/tags/v2
  • Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/compile-insgit rev-parse /usr/bin/gh git rev-�� --show-toplevel gh /usr/bin/git /repos/actions/ginfocmp --jq /usr/bin/git git (http block)
  • Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git ons-test35559905git config /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel /opt/hostedtoolcache/node/24.14.1/x64/bin/node /usr/bin/git github.event.inpinfocmp git /usr/bin/git git (http block)
• https://api.github.com/repos/docker/login-action/git/ref/tags/v3
  • Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git k/gh-aw/gh-aw/pkgit remote.origin.urrev-parse /opt/hostedtoolc--show-toplevel git rev-�� /ref/tags/v9 /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/compile sv /tmp/go-build407infocmp -trimpath /usr/bin/git git (http block)
  • Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /ref/tags/v9 git sv git rev-�� /ref/tags/v9 /opt/hostedtoolcache/node/24.14.1/x64/bin/node sv true git /usr/bin/git git (http block)
• https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/gh 1112232126 /tmp/go-build407rev-parse e/git gh api /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git mplied /tmp/go-build407-1 ache/node/24.14.xterm-color git (http block)
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv user.name Test User /usr/bin/gh run on ache/node/24.14./repos/actions/github-script/git/ref/tags/v9 gh repo�� view owner/test-repo /usr/bin/git bility_SameInputinfocmp infocmp tartedAt,updatedxterm-color git (http block)
• https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv --get remote.origin.url /usr/bin/git .js' --ignore-pagit --oneline x_amd64/vet git bran�� --show-current epo}/actions/runs/12346/artifacts /usr/bin/git e (http block)
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 s/4/artifacts (http block)
• https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 -extld=gcc sv 116873594/001 116873594/002/worev-parse x_amd64/vet git add /ref/tags/v9 x_amd64/vet sv file-parallelismgit flow-ci-test-678rev-parse 64/pkg/tool/linu--show-toplevel git (http block)
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv /usr/bin/git git /usr/bin/git json' --ignore-pgit git layTitle git -C /tmp/shared-actions-test3555990530 show /usr/bin/git th .prettierignogit assword=$GITHUB_rev-parse odules/npm/node_--show-toplevel git (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs
  • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-05-01 (http block)
  • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-04-08 (http block)
  • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-02-07 (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
  • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name --no-file-parallelism 64/pkg/tool/linux_amd64/compile /../../.prettier/usr/bin/git TOKEN"; }; f getconfig github.com 64/pkg/tool/linu^remote\..*\.gh-resolved$ (http block)
  • Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 767979/b018/vet.cfg cfg ./../.prettieriggit (http block)
  • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name git nfig/composer/vendor/bin/sh --show-toplevel git /usr/bin/git /bin/sh -c te 'scripts/**/*.js' --ignore-path .prettierignore --log-level=error f() { test "$1" = get && echo "******"; }; f store k/gh-aw/gh-aw/actions/setup/js/node_modules/.bin/node /ref/tags/v9 git sv bash (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
  • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name on ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /../../.prettiergit erignore de ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
  • Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 on 64/pkg/tool/linux_amd64/vet /../../.prettier/usr/bin/git erignore modules/@npmcli/-v 64/pkg/tool/linux_amd64/vet -c 767979/b125/_pkg_.a (http block)
  • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name infocmp k xterm-color git (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/1234567890
  • Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, --noprofile elism son ignore (http block)
  • Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, --show-toplevel git /usr/bin/git /ref/tags/v9 git sv git rev-�� /setup/js/determ-errorsas git /usr/bin/git --show-toplevel git /usr/bin/git git (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
  • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name on til.test /../../.prettiergit erignore /node til.test 0776�� 2806802366 767979/b077/vet.cfg cfg (http block)
  • Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 on ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /../../.prettier/opt/hostedtoolcache/node/24.14.1/x64/bin/node erignore de/node/bin/git ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
  • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name gh es/.bin/node /repos/actions/ggit --jq /usr/bin/git git k/gh�� . -v k/gh-aw/node_modules/.bin/sh --show-toplevel git erignore git (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
  • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name --no-file-parallelism ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet tierignore TOKEN"; }; f storun ode_modules/.binlist ache/go/1.25.8/x--json /opt�� /ref/tags/v9 --write sv **/*.ts **/*.json --ignore-path ache/go/1.25.8/xTest User (http block)
  • Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 767979/b019/vet.cfg cfg ./../.prettieriggit onpins_test odules/npm/node_--show-toplevel ache/go/1.25.8/x64/pkg/tool/linu-dwarf=false (http block)
  • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name git p/bin/sh --show-toplevel git ode-gyp-bin/sh /usr/lib/git-core/git send�� te 'scripts/**/*.js' --ignore-path .prettierignore --log-level=error --helper-status k/gh-aw/gh-aw/actions/setup/node_modules/.bin/node --verbose --no-progress REDACTED bash (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
  • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name --no-file-parallelism 64/pkg/tool/linux_amd64/vet tierignore .go _modules/.bin/noxterm-color 64/pkg/tool/linux_amd64/vet (http block)
  • Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 767979/b020/vet.cfg ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet ./../.prettieriggit (http block)
  • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name git tnet/tools/sh /ref/tags/v9 git sv /usr/lib/git-core/git pack�� te 'scripts/**/*.js' --ignore-path .prettierignore --log-level=error --revs k/gh-aw/gh-aw/actions/node_modules/.bin/node --thin --delta-base-offrev-parse -q bash (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
  • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name --no-file-parallelism 64/pkg/tool/linux_amd64/compile tierignore (http block)
  • Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 767979/b023/vet.cfg cfg ./../.prettieriggit (http block)
  • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name git sh --show-toplevel git /usr/bin/infocmpxterm-color git ranc�� te 'scripts/**/*.js' --ignore-path .prettierignore --log-level=error infocmp k/gh-aw/gh-aw/node_modules/.bin/node /ref/tags/v9 git sv git (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
  • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name /home/REDACTED/work/gh-aw/gh-aw/actions/setup/js/node_modules/vitest/suppress-warnpkg/workflow/searev-parse ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile node --conditions development ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile stlo�� 767979/b070/_pkg_.a --write x_amd64/vet **/*.ts **/*.json --ignore-path x_amd64/vet (http block)
  • Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 767979/b022/vet.cfg cfg ./../.prettieriggit (http block)
  • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name git h ithub-script/gitgit git (http block)
• https://api.github.com/repos/github/gh-aw/actions/workflows
  • Triggering command: /usr/bin/gh gh workflow list --json name,state,path file-parallelism --shard=1/4 determine_automatic_lockdown.test.cjs (http block)
  • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/timeutil/spec_test.go x_amd64/vet .git�� */*.json' '!../.-errorsas (http block)
  • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 (http block)
• https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md
  • Triggering command: /tmp/go-build407767979/b405/cli.test /tmp/go-build407767979/b405/cli.test -test.testlogfile=/tmp/go-build407767979/b405/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true (http block)
  • Triggering command: /tmp/go-build2969987469/b405/cli.test /tmp/go-build2969987469/b405/cli.test -test.testlogfile=/tmp/go-build2969987469/b405/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true /repos/actions/gprettier --jq /usr/bin/git git rev-�� --show-toplevel git modules/@npmcli/run-script/lib/node-gyp-bin/sh --show-toplevel git /usr/bin/git git (http block)
• https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/gh-aw-test-du remote om/other/repo.gi/tmp/gh-aw/aw-feature-branch.patch git rev-�� --show-toplevel node /usr/bin/gh /home/REDACTED/worgit x_amd64/vet /usr/bin/git gh (http block)
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel (http block)
• https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv se 767979/b224/vet.cfg 1/x64/bin/node tierignore (http block)
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv xterm-color git bin/sh ithub-script/gitgit git bject.type] | @t--show-toplevel git rev-�� (http block)
• https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv */*.ts' '**/*.json' --ignore-path ../../../.prettierignore (http block)
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv json' --ignore-path ../../../.pr**/*.json git /usr/bin/gh --show-toplevel git /usr/bin/git gh api th .prettierignore --log-level=error --jq _modules/.bin/node --show-toplevel docker (http block)
• https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv go1.25.8 -c=4 -nolocalimports -importcfg /tmp/go-build407767979/b465/importcfg -pack /tmp/go-build407767979/b465/_testmain.go 1/x6�� ub/workflows ify@v1.11.1/assert/assertion_format.go x_amd64/compile son (http block)
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv vitest run --no-file-parallelism --shard=1/4 determine_automatic_lockdown.test.cjs on x_amd64/vet /../../.prettiergit erignore (http block)
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv iant-2273316681/--detach git n-dir/git ithub-script/gitgit 767979/b477/imporev-parse bject.type] | @t--show-toplevel git ch_w�� th .prettierignore --log-level=error gh node /repos/actions/ggit --jq ker/docker-init git (http block)
• https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv -c=4 -nolocalimports -importcfg /tmp/go-build407767979/b470/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/types/spec_test.go x_amd64/vet k/gh�� ub/workflows (http block)
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv iant-2273316681/.github/workflows git /usr/bin/infocmp --show-toplevel git /usr/bin/gh infocmp -1 th .prettierignore --log-level=error gh n-dir/node /repos/actions/ginfocmp --jq /usr/bin/git git (http block)
• https://api.github.com/repos/google-github-actions/auth/git/ref/tags/v2
  • Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git (http block)
  • Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/infocmp runs/20260508-03git show /usr/bin/git infocmp (http block)
• https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
  • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv efaultBranchFromLsRemoteWithRealgo1.25.8 efaultBranchFromLsRemoteWithReal-c=4 64/pkg/tool/linux_amd64/compile tierignore (http block)
  • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv --show-toplevel gh 1/x64/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin/sh /repos/actions/ggit --jq /usr/bin/git git rev-�� 382543/001 git de_modules/.bin/node --show-toplevel git /usr/bin/gh git (http block)
• https://api.github.com/repos/nonexistent/repo/actions/runs/12345
  • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion h ../../../.pretgit (http block)
  • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion ithub-script/gitgit infocmp erignore git rev-�� te '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' ---errorsas wc 1/x64/bin/node ache/node/24.14.gh git /usr/bin/infocmp--paginate 1/x64/bin/node (http block)
• https://api.github.com/repos/owner/repo/actions/workflows
  • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo tions/node_modul-nilfunc ignore (http block)
  • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo ules/.bin/node ignore (http block)
  • Triggering command: /usr/bin/gh gh workflow list --repo owner/repo --json name,path,state ache/go/1.25.8/x64/pkg/tool/linu-nolocalimports **/*.ts **/*.json --ignore-path ache/go/1.25.8/x64/pkg/tool/linuorigin (http block)
• https://api.github.com/repos/test-owner/test-repo/actions/secrets
  • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name *.json' '!../../../pkg/workflow/js/**/*.json' --ignore-path ../../../.prettierignore (http block)
  • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name h ../../../.pret.prettierignore git /usr/bin/git --show-toplevel gh 64/bin/node git rev-�� w/js/**/*.json' --ignore-path git /usr/bin/git --show-toplevel b097-388bf8fdcb5-1 (http block)
• https://api.github.com/repos/test/repo
  • Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch /ref/tags/v9.0.0 767979/b086/vet.cfg $name) { hasDiscussionsEnabled } } **/*.json --ignore-path ../../../.pretti--show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -c 2251-15971/test-3130559502/.github/workflows (http block)
  • Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch FieldEnforcement1028480562/001 gh (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[Copilot]

Pull request overview

This PR stabilizes the CJS test suite for determine_automatic_lockdown by removing a brittle log-mock assertion from a behavior-focused test and scoping that assertion to the dedicated logging test instead.

Changes:

• Removed the "guard policy automatically applied" core.info expectation from the public-repository behavior test.
• Added the "guard policy automatically applied" expectation to the public-repository logging test (where other core.info assertions already live).

Show a summary per file

File	Description
actions/setup/js/determine_automatic_lockdown.test.cjs	Moves a brittle log assertion out of the behavior test and into the logging-focused test to reduce coupling to incidental logs.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 1/1 changed files
• Comments generated: 0