Move setup action files to /opt/gh-aw for readonly access #9270

Copilot · 2026-01-07T19:45:39Z

Changeset

Type: patch
Description: Move action setup and compiler paths from /tmp/gh-aw to /opt/gh-aw so agent access is read-only; updates setup action, compiler constants, tests, and AWF mounts.

All Changes Completed ✅

Successfully updated the codebase to use /opt/gh-aw for readonly files and /tmp/gh-aw for writable files:

Readonly files in /opt/gh-aw/:

JavaScript and shell script locations in /opt/gh-aw/actions
Safe-inputs server files and configuration in /opt/gh-aw/safe-inputs
Safe-outputs configuration files (config.json, tools.json)
Prompt files in /opt/gh-aw/prompts
All require() statements for script loading
MCP server entry points

Writable files in /tmp/gh-aw/:

Safe-outputs output file: /tmp/gh-aw/safeoutputs/outputs.jsonl
Agent output artifact downloads: /tmp/gh-aw/safeoutputs/
Safe-inputs logs: /tmp/gh-aw/safe-inputs/logs/
MCP logs: /tmp/gh-aw/mcp-logs/
Sandbox logs and artifacts

Final validation:

✅ Code formatted successfully
✅ All linting checks passed
✅ Merged with latest main branch (multiple times for latest updates)
✅ All 123 workflows recompiled successfully with latest changes
✅ Readonly mount --mount /opt/gh-aw:/opt/gh-aw:ro applied to all engines (Copilot, Claude, Codex)

The /opt/gh-aw directory is now mounted as readonly in the firewall container, ensuring the agent cannot modify script files, prompt files, or configuration files during execution. All writable data (output files, logs, downloaded artifacts) is in /tmp/gh-aw.

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

Changeset

Type: patch
Description: Move action setup and compiler paths from /tmp/gh-aw to /opt/gh-aw so agent access is read-only; updates setup action, compiler constants, tests, and AWF mounts.

Ahoy! This treasure was crafted by 🏴‍☠️ Changeset Generator

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-01-07T20:33:52Z

@copilot the /opt/gh-aw/ should be mounted as readonly in the firewall/sandbox

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-01-07T20:43:02Z

@copilot the /opt/gh-aw/ should be mounted as readonly in the firewall/sandbox

Added readonly mount configuration for /opt/gh-aw in the AWF firewall container across all three engines (Copilot, Claude, and Codex). The mount is configured as --mount /opt/gh-aw:/opt/gh-aw:ro ensuring script files cannot be modified by the agent during execution. Changes in commit cea73fe.

pelikhan · 2026-01-07T20:53:16Z

@copilot merge main, recompile

…ot/update-setup-script-location # Conflicts: # specs/artifacts.md

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-01-07T21:02:46Z

@copilot merge main, recompile

Merged main branch and recompiled all 123 workflows successfully. Changes in commit 1985d22.

…script-location

github-actions · 2026-01-07T22:09:39Z

💀 Blimey! Smoke Copilot Safe Inputs failed and walked the plank! No treasure today, matey! ☠️

github-actions · 2026-01-07T22:09:39Z

📰 DEVELOPING STORY: Smoke Copilot Playwright reports failed. Our correspondents are investigating the incident...

Copilot · 2026-01-08T01:57:59Z

@copilot merge main and recompile

Merged latest main branch and recompiled all 123 workflows successfully. Resolved merge conflicts in 12 lock files by accepting main branch versions and then recompiling to apply our readonly mount changes. All workflows now have the updated paths with /opt/gh-aw for readonly files and /tmp/gh-aw for writable files. Changes in commit 2518a52.

pelikhan · 2026-01-08T03:00:25Z

@copilot merge main recompile

…script-location

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-01-08T03:06:37Z

@copilot merge main recompile

Merged latest main branch and recompiled all 123 workflows successfully. Resolved 11 merge conflicts in lock files by accepting main branch versions and recompiling to apply our readonly mount changes. All workflows now include the updated paths with /opt/gh-aw for readonly files and /tmp/gh-aw for writable files. Changes in commit 3553982.

github-actions · 2026-01-08T03:14:51Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-01-08T03:14:51Z

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

github-actions · 2026-01-08T03:14:52Z

🤖 DIAGNOSTIC COMPLETE: Smoke Copilot No Firewall STATUS: ALL_UNITS_OPERATIONAL. MISSION_SUCCESS.

github-actions · 2026-01-08T03:14:53Z

📰 DEVELOPING STORY: Smoke Copilot reports failed. Our correspondents are investigating the incident...

github-actions · 2026-01-08T03:14:53Z

🎉 Yo ho ho! Smoke Copilot Safe Inputs found the treasure and completed successfully! ⚓💰

github-actions · 2026-01-08T03:14:54Z

📰 VERDICT: Smoke Copilot Playwright has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-01-08T03:14:54Z

✅ Firewall validation complete... Smoke Codex Firewall confirmed network sandboxing is operational. 🛡️

github-actions · 2026-01-08T03:14:55Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-01-08T03:16:53Z

Smoke Test Results

✅ File Writing: Created and verified test file
✅ Bash Tool: File operations successful
❌ Safe Input gh Tool: Tool not available in environment

Status: FAIL (safeinputs-gh tool missing)

Note: The safeinputs-gh tool is not present in the workflow environment. This may indicate the safe-inputs feature is not properly configured or installed.

AI generated by Smoke Copilot Safe Inputs

github-actions · 2026-01-08T03:16:56Z

Smoke Test Results ✅

All tests passed successfully:

✅ Last 2 merged PRs reviewed (Upgrade upload-artifact to v6.0.0 #9302, Clarify MCP Gateway only supports containerized stdio and HTTP servers #9295)
✅ Test file created at /tmp/gh-aw/agent/smoke-test-copilot-20804236696.txt
✅ GitHub homepage navigated (title verified)
✅ 3 open issues listed (Workflows need recompilation #9296, [ca] Update Copilot CLI to 0.0.375 and Codex to 0.79.0 #9268, Daily Test Improver: The action is not allowed #9260)

AI generated by Smoke Copilot No Firewall

github-actions · 2026-01-08T03:17:15Z

Smoke Test Results

✅ Cache Memory: File created successfully
❌ Playwright MCP: Not available (no MCP tools detected)
❌ safeinputs-gh Tool: Not available in this workflow

Overall Status: FAIL (2/3 tests failed - missing tools)

Note: This appears to be a standard copilot workflow without Playwright MCP or safeinputs-gh tool configured.

AI generated by Smoke Copilot Playwright

github-actions · 2026-01-08T03:17:21Z

PRs: Upgrade upload-artifact to v6.0.0; Clarify MCP Gateway only supports containerized stdio and HTTP servers
OpenAI curl blocked ✅
MCP merged PR fetch ✅
File write/read ✅
Blocked domain curl ✅
Protocol allow-domains keeps https://api.github.com ✅
Network: SANDBOXED
Overall: PASS

AI generated by Smoke Codex Firewall

github-actions · 2026-01-08T03:17:44Z

PRs: Upgrade upload-artifact to v6.0.0 | [WIP] Update mcp server configuration for safe-output
GitHub MCP: ✅
File write/read: ✅
Playwright github.com title: ✅
Cache memory: ✅
safeinputs-gh issues list: ❌ (tool unavailable)
Overall: FAIL

AI generated by Smoke Codex

Initial plan

c0fb985

Copilot AI assigned Copilot and pelikhan Jan 7, 2026

Copilot started work on behalf of pelikhan January 7, 2026 19:46 View session

Copilot AI and others added 3 commits January 7, 2026 20:06

Update paths from /tmp/gh-aw to /opt/gh-aw for readonly script access

67d0e28

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Update test files to use /opt/gh-aw paths

d796653

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Fix remaining test path references to use /opt/gh-aw

5260a47

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Update setup script to copy files to /opt/gh-aw~~ Move setup action files to /opt/gh-aw for readonly access Jan 7, 2026

Copilot AI requested a review from pelikhan January 7, 2026 20:29

Copilot finished work on behalf of pelikhan January 7, 2026 20:29

Copilot started work on behalf of pelikhan January 7, 2026 20:34 View session

Mossaka approved these changes Jan 7, 2026

View reviewed changes

Copilot AI and others added 2 commits January 7, 2026 20:42

Mount /opt/gh-aw as readonly in AWF firewall container

b07b977

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Remove test files

cea73fe

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan January 7, 2026 20:44

pelikhan added the smoke label Jan 7, 2026

pelikhan marked this pull request as ready for review January 7, 2026 20:52

Copilot started work on behalf of pelikhan January 7, 2026 20:54 View session

Copilot AI and others added 2 commits January 7, 2026 21:00

Merge branch 'main' of https://github.com/githubnext/gh-aw into copil…

38ced7f

…ot/update-setup-script-location # Conflicts: # specs/artifacts.md

Merge main and recompile all workflows

1985d22

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan January 7, 2026 21:05

Merge remote-tracking branch 'origin/main' into copilot/update-setup-…

ef381b8

…script-location

pelikhan added smoke and removed smoke labels Jan 7, 2026

Copilot finished work on behalf of pelikhan January 8, 2026 01:59

Copilot started work on behalf of pelikhan January 8, 2026 03:00 View session

Copilot AI and others added 2 commits January 8, 2026 03:05

Merge remote-tracking branch 'origin/main' into copilot/update-setup-…

9bc6ab0

…script-location

Merge main and recompile workflows

3553982

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan January 8, 2026 03:07

pelikhan added smoke and removed smoke labels Jan 8, 2026

github-actions bot added the smoke-copilot-no-firewall label Jan 8, 2026

Add changeset [skip-ci]

f4aa127

github-actions bot added the smoke-codex-firewall label Jan 8, 2026

pelikhan merged commit f1c623c into main Jan 8, 2026
80 checks passed

pelikhan deleted the copilot/update-setup-script-location branch January 8, 2026 03:28

This was referenced Jan 8, 2026

Refactor agentic engine error patterns from Go to JavaScript #9303

Closed

Transform Copilot conversation.md headers for step summaries #9301

Merged

Move setup action files to /opt/gh-aw for readonly access #9270

Move setup action files to /opt/gh-aw for readonly access #9270

Uh oh!

Conversation

Copilot AI commented Jan 7, 2026 • edited by agentic-workflows-dev bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changeset

All Changes Completed ✅

Changeset

Uh oh!

pelikhan commented Jan 7, 2026

Uh oh!

Copilot AI commented Jan 7, 2026

Uh oh!

pelikhan commented Jan 7, 2026

Uh oh!

Copilot AI commented Jan 7, 2026

Uh oh!

github-actions bot commented Jan 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI commented Jan 8, 2026

Uh oh!

pelikhan commented Jan 8, 2026

Uh oh!

Copilot AI commented Jan 8, 2026

Uh oh!

github-actions bot commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 8, 2026 • edited by agentic-workflows-dev bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 8, 2026

Smoke Test Results

Uh oh!

github-actions bot commented Jan 8, 2026

Smoke Test Results ✅

Uh oh!

github-actions bot commented Jan 8, 2026

Smoke Test Results

Uh oh!

github-actions bot commented Jan 8, 2026

Uh oh!

github-actions bot commented Jan 8, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Jan 7, 2026 •

edited by agentic-workflows-dev bot

Loading

github-actions bot commented Jan 7, 2026 •

edited

Loading

github-actions bot commented Jan 7, 2026 •

edited

Loading

github-actions bot commented Jan 8, 2026 •

edited

Loading

github-actions bot commented Jan 8, 2026 •

edited by agentic-workflows-dev bot

Loading

github-actions bot commented Jan 8, 2026 •

edited

Loading

github-actions bot commented Jan 8, 2026 •

edited

Loading

github-actions bot commented Jan 8, 2026 •

edited

Loading

github-actions bot commented Jan 8, 2026 •

edited

Loading

github-actions bot commented Jan 8, 2026 •

edited

Loading

github-actions bot commented Jan 8, 2026 •

edited

Loading