v0.85.4

🌟 Release Highlights

This release is a major security-hardening pass — expanding secret masking across git, JavaScript runtimes, and MCP servers — alongside new automated audits, linter capabilities, and documentation improvements.

🔒 Security Hardening

• Expanded secret masking coverage: git invocations in JS action scripts, derived secrets in JavaScript runtimes, authHeader values in git auth helpers, and API-derived OTLP access tokens are now automatically masked with core.setSecret, closing several avenues for accidental secret leakage in logs and artifacts.
• MCP server secret protection: secret masking is now prevented from leaking through MCP servers, and safe-output artifacts no longer capture base64 CI trigger tokens or raw process stdout/stderr logs.
• Zizmor CI gating: workflows now fail CI on high/critical severity Zizmor findings, and Zizmor now runs against all generated workflows in CI for continuous security scanning.

✨ What's New

• Daily action/setup security audit with cache-memory aspect rotation to continuously check for supply-chain risk.
• report-failed-jobs added to the safe-outputs JSON schema.
• New linters: regexpdynamicpattern flags non-constant regexp compile patterns, and the errormessage linter gained a full-repo audit mode.
• list_label MCP pagination now supports name filtering.
• Custom engine execution steps now receive GH_AW_ENGINE_VERSION for better version-aware behavior.

🐛 Bug Fixes & Improvements

• Fixed add_labels silently applying no labels.
• Fixed container pin validation to correctly skip unpinned containers.
• Fixed a fleet-wide smoke-test outage caused by a cli-proxy image tag mismatch.
• Fixed trial not forwarding issue_number to workflows that don't declare it, and rendering the logical repo in the github-context prompt.
• Fixed GITHUB_STEP_SUMMARY being unwritable in the AWF sandbox during threat detection (external detector bumped to v0.4.0).
• Fixed detection-analysis-report timeouts and redundant log downloads.
• compile no longer adds an ineffective merge=ours entry to the generated .gitattributes.
• Retained jobs.*.permissions for built-in safe-outputs and conclusion jobs.

📚 Documentation

• New guide documenting ARC and sandbox runtime architecture.
• Refined homepage security features and highlighted self-hosted runners with microVM isolation.
• Clarified that custom safe-output jobs run once per workflow run, not once per tool call.
• Various self-healing documentation fixes and an unbloated "About" page.> Generated by 🚀 Release · auto · 18.4 AIC · ⊞ 11.2K

---

What's Changed

• fix: prevent secret leakage in git invocations in JS action scripts by @pelikhan with @Copilot in #50730
• fix: exclude process stdout/stderr logs from safe-outputs-items artifact by @pelikhan with @Copilot in #50739
• fix: detection-analysis-report timeout and redundant log downloads by @pelikhan with @Copilot in #50716
• Add full-repo audit mode to pkg/linters/errormessage by @pelikhan with @Copilot in #50695
• trial: fail and report rejected safe-output errors instead of always reporting success by @pelikhan with @Copilot in #50723
• fix: propagate max-ai-credits to external detector AWF config by @pelikhan with @Copilot in #50721
• Mask derived secrets in JavaScript runtimes by @pelikhan with @Copilot in #50741
• threat-detection: fix GITHUB_STEP_SUMMARY unwritable in AWF sandbox (v0.4.0 exit 2) by @pelikhan with @Copilot in #50717
• [avenger] Apply prettier formatting to shim.cjs by @github-actions[bot] in #50750
• [log] Add debug logging to under-instrumented workflow/cli files by @github-actions[bot] in #50755
• Prevent secret masking from MCP servers by @pelikhan in #50746
• Mask API-derived OTLP access tokens by @pelikhan with @Copilot in #50774
• feat: daily action/setup/* security audit with cache-memory aspect rotation by @pelikhan with @Copilot in #50783

Full Changelog: v0.85.3...v0.85.4