Add support for importing safe-outputs.jobs from shared workflows

[Copilot]

safe-outputs.jobs defined in shared workflows (via imports:) were not being merged into the main workflow.

Changes

• Schema fix: Added missing name and description properties to safe-outputs.jobs in main_workflow_schema.json (already present in included_file_schema.json)
• Compiler fix: Updated job merge logic to always use the merged includedSafeJobs result, which already contains both main and imported jobs with conflict detection

Example

# shared/jobs.md
---
safe-outputs:
  jobs:
    notify:
      runs-on: ubuntu-latest
      steps:
        - run: echo "Notified"
---

# workflow.md
---
on: issues
imports:
  - shared/jobs.md
safe-outputs:
  jobs:
    cleanup:
      runs-on: ubuntu-latest
      steps:
        - run: echo "Cleaned"
---

Both notify and cleanup jobs are now correctly included in the compiled workflow.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/user
  • Triggering command: /usr/bin/gh gh api user --jq .login (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Add support to imports safe-outputs.jobs from a shared agentic workflow.

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[Copilot]

Pull request overview

This PR fixes a bug where safe-outputs.jobs defined in shared workflows (via imports:) were not being merged into the main workflow. The root cause was an incorrect condition that prevented assignment of merged jobs when the main workflow already had jobs defined.

Key changes:

• Fixed the compiler logic to always use the merged jobs result, which already contains both main and imported jobs
• Added missing name and description properties to the main workflow schema for consistency with the included file schema
• Added comprehensive test coverage for job imports, including conflict detection

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
pkg/workflow/compiler.go	Removed incorrect condition that prevented merged jobs assignment when main workflow had existing jobs, ensuring both main and imported jobs are always included
pkg/parser/schemas/main_workflow_schema.json	Added name and description properties to safe-outputs.jobs schema to match included_file_schema.json
pkg/workflow/safe_outputs_import_test.go	Added three comprehensive test cases covering: importing jobs only, combining main and imported jobs, and detecting job name conflicts

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review for a chance to win a $100 gift card. Take the survey.