Fix cross-repo workflow_call integrity check: use github.workflow_ref instead of GITHUB_WORKFLOW_REF by Copilot · Pull Request #24200 · github/gh-aw

Copilot · 2026-04-03T00:53:58Z

When a reusable gh-aw workflow is called cross-repo via workflow_call, the GITHUB_WORKFLOW_REF env var always reflects the top-level caller's workflow — not the callee. This caused check_workflow_timestamp_api.cjs to resolve the wrong source repo and fail with 404 when fetching the lock file.

Root cause

GITHUB_WORKFLOW_REF (env var) ≠ ${{ github.workflow_ref }} (Actions context):

Env var: always the top-level initiating workflow (caller)
Context expression: correctly refers to the reusable workflow being executed (callee)

Example failure scenario:

GITHUB_WORKFLOW_REF: elastic/ai-github-actions-playground/.github/workflows/explore-add-data-riley.yml@refs/heads/main
GITHUB_REPOSITORY:  elastic/ai-github-actions-playground

# Script looks for lock file in elastic/ai-github-actions-playground → 404
# Lock file actually lives in the platform repo (e.g. elastic/ai-github-actions)
Could not fetch content for .github/workflows/gh-aw-internal-gemini-cli.lock.yml: Not Found
Error: ERR_CONFIG: Lock file integrity check failed!

Changes

compiler_activation_job.go: Inject GH_AW_CONTEXT_WORKFLOW_REF: "${{ github.workflow_ref }}" into the "Check workflow lock file" step env. The compiler knows this expression will be evaluated correctly by the Actions runtime. The step is renamed from "Check workflow file timestamps" to "Check workflow lock file" to accurately reflect that it performs a frontmatter hash comparison to detect stale lock files, not a timestamp check.
check_workflow_timestamp_api.cjs: Prefer GH_AW_CONTEXT_WORKFLOW_REF over GITHUB_WORKFLOW_REF when resolving the source repo and ref. Falls back to GITHUB_WORKFLOW_REF for backwards compatibility (e.g. older compiled workflows without the new env var). Logs both values when GH_AW_CONTEXT_WORKFLOW_REF is present.
check_workflow_timestamp_api.test.cjs: Two new test suites with full same-repo and cross-repo scenario coverage:
- cross-repo invocation via workflow_call: correct repo resolution from GH_AW_CONTEXT_WORKFLOW_REF, cross-repo detection, logging, and fallback to GITHUB_WORKFLOW_REF when the new var is absent.
- same-repo invocation via workflow_call: verifies same-repo detection, hash check, and API ref resolution remain correct when GH_AW_CONTEXT_WORKFLOW_REF is injected by the compiler.
Lock files + golden files: All 183 .lock.yml files and wasm golden files regenerated to include the new env var injection and the renamed step.

…grity check For cross-repo workflow_call invocations, GITHUB_WORKFLOW_REF env var points to the top-level caller's workflow, not the reusable (callee) workflow. This caused check_workflow_timestamp_api.cjs to look for lock files in the wrong repository. The fix injects GH_AW_CONTEXT_WORKFLOW_REF from ${{ github.workflow_ref }} which correctly identifies the current reusable workflow even in cross-repo scenarios. Closes #23935 Agent-Logs-Url: https://github.com/github/gh-aw/sessions/536ff9ae-a2dc-4523-923d-77dc878c16ca Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-04-03T01:50:43Z

@copilot ensure in repo and cross repo scenarios are covered by tests.

…erage Agent-Logs-Url: https://github.com/github/gh-aw/sessions/7e532aa5-50a0-41e2-9fa9-00407921a08e Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-04-03T01:57:36Z

@copilot ensure in repo and cross repo scenarios are covered by tests.

Both scenarios are now explicitly covered in check_workflow_timestamp_api.test.cjs (commit 538df40):

Same-repo (same-repo invocation via workflow_call suite, 3 tests):

Detects same-repo when GH_AW_CONTEXT_WORKFLOW_REF points to the same repo as GITHUB_REPOSITORY
Passes hash check and calls API with the correct same-repo owner/repo
Uses ref from GH_AW_CONTEXT_WORKFLOW_REF (not context.sha) for API calls

Cross-repo (cross-repo invocation via workflow_call suite, 4 tests):

Uses GH_AW_CONTEXT_WORKFLOW_REF to resolve the platform repo, not the caller repo in GITHUB_WORKFLOW_REF
Logs both env vars with correct attribution
Detects cross-repo correctly
Falls back to GITHUB_WORKFLOW_REF when GH_AW_CONTEXT_WORKFLOW_REF is absent

pelikhan · 2026-04-03T02:18:22Z

@copilot fix https://github.com/github/gh-aw/actions/runs/23930386548/job/69796751088#step:7:1

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/f49e39ad-fc0f-44fc-a75c-4c451342b736 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-04-03T02:30:39Z

@copilot fix https://github.com/github/gh-aw/actions/runs/23930386548/job/69796751088#step:7:1

Fixed in commit f8d58bb. The CI failure was caused by a merge conflict with main branch commit 7122e61 (#24198), which changed the "unverifiable" error message in check_workflow_timestamp_api.cjs from "integrity check failed" to "outdated or unverifiable". When the CI merges our PR branch with latest main, main's updated message wins, causing all 6 test assertions that checked for "integrity check failed" to fail.

The fix adopts main's updated message in our CJS and updates all 6 test assertions accordingly.

Copilot

Pull request overview

Fixes cross-repo workflow_call lock-file integrity checks by using the reusable workflow’s actual ref (${{ github.workflow_ref }}) rather than the caller workflow’s GITHUB_WORKFLOW_REF, preventing incorrect repo resolution and 404s when fetching lock files.

Changes:

Inject GH_AW_CONTEXT_WORKFLOW_REF: "${{ github.workflow_ref }}" into the activation job’s “Check workflow file timestamps” step.
Update check_workflow_timestamp_api.cjs to prefer GH_AW_CONTEXT_WORKFLOW_REF (fallback to GITHUB_WORKFLOW_REF) and log both when available.
Add test coverage for same-repo and cross-repo workflow_call scenarios; regenerate lock/golden fixtures to include the new env var.

Reviewed changes

Copilot reviewed 188 out of 188 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
pkg/workflow/compiler_activation_job.go	Injects `GH_AW_CONTEXT_WORKFLOW_REF` into the timestamp/hash check step env.
actions/setup/js/check_workflow_timestamp_api.cjs	Prefers `GH_AW_CONTEXT_WORKFLOW_REF` for repo/ref resolution; improves messaging/logging.
actions/setup/js/check_workflow_timestamp_api.test.cjs	Adds cross-repo and same-repo `workflow_call` regression coverage; updates assertions for new messaging.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden	Golden output regenerated to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden	Golden output regenerated to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/workflow-skill-extractor.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/workflow-normalizer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/workflow-health-manager.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/workflow-generator.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/weekly-safe-outputs-spec-review.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/weekly-issue-summary.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/weekly-editors-health-check.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/weekly-blog-post-writer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/video-analyzer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/update-astro.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/unbloat-docs.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/ubuntu-image-analyzer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/typist.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/tidy.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/test-workflow.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/test-project-url-default.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/test-dispatcher.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/test-create-pr-error-handling.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/terminal-stylist.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/technical-doc-writer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/super-linter.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/sub-issue-closer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/step-name-alignment.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/static-analysis-report.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/stale-repo-identifier.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-workflow-call.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-workflow-call-with-inputs.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-update-cross-repo-pr.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-test-tools.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-temporary-id.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-service-ports.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-project.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-multi-pr.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-gemini.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-create-cross-repo-pr.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-copilot.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-copilot-arm.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-codex.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-claude.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-call-workflow.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-agent-scoped-approved.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-agent-public-none.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-agent-public-approved.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-agent-all-none.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/smoke-agent-all-merged.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/slide-deck-maintainer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/sergo.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/semantic-function-refactor.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/security-review.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/security-compliance.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/scout.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/schema-feature-coverage.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/schema-consistency-checker.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/safe-output-health.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/research.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/repository-quality-improver.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/repo-tree-map.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/repo-audit-analyzer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/release.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/refiner.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/q.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/python-data-charts.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/prompt-clustering-analysis.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/pr-triage-agent.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/pr-nitpick-reviewer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/portfolio-analyst.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/poem-bot.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/plan.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/pdf-summary.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/org-health-report.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/notion-issue-summary.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/metrics-collector.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/mergefest.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/mcp-inspector.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/lockfile-stats.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/layout-spec-maintainer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/jsweep.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/issue-triage-agent.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/issue-monster.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/issue-arborist.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/instructions-janitor.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/hourly-ci-cleaner.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/grumpy-reviewer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/gpclean.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/go-pattern-detector.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/go-logger.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/go-fan.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/glossary-maintainer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/github-remote-mcp-auth-test.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/github-mcp-tools-report.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/github-mcp-structural-analysis.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/functional-pragmatist.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/firewall.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/firewall-escape.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/example-workflow-analyzer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/example-permissions-warning.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/duplicate-code-detector.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/draft-pr-cleanup.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/docs-noob-tester.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/discussion-task-miner.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/dictation-prompt.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/developer-docs-consolidator.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/dev.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/dev-hawk.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/dependabot-go-checker.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/dependabot-burner.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/delight.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/deep-report.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/dead-code-remover.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-workflow-updater.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-testify-uber-super-expert.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-team-status.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-team-evolution-insights.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-syntax-error-quality.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-semgrep-scan.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-security-red-team.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-secrets-analysis.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-safe-outputs-conformance.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-safe-output-optimizer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-safe-output-integrator.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-repo-chronicle.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-rendering-scripts-verifier.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-regulatory.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-performance-summary.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-observability-report.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-news.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-multi-device-docs-tester.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-mcp-concurrency-analysis.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-malicious-code-scan.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-issues-report.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-integrity-analysis.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-function-namer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-firewall-report.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-file-diet.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-fact.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-doc-updater.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-doc-healer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-copilot-token-report.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-compiler-quality.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-community-attribution.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-code-metrics.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-cli-tools-tester.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-cli-performance.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-choice-test.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-assign-issue-to-user.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/daily-architecture-diagram.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/craft.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/copilot-token-usage-analyzer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/copilot-token-optimizer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/copilot-session-insights.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/copilot-pr-prompt-analysis.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/copilot-pr-nlp-analysis.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/copilot-pr-merged-report.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/copilot-cli-deep-research.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/copilot-agent-analysis.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/contribution-check.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/constraint-solving-potd.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/commit-changes-analyzer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/codex-github-remote-mcp-test.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/code-simplifier.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/code-scanning-fixer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/cloclo.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/cli-version-checker.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/cli-consistency-checker.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/claude-token-usage-analyzer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/claude-token-optimizer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/claude-code-user-docs-review.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/ci-doctor.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/ci-coach.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/changeset.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/breaking-change-checker.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/brave.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/bot-detection.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/blog-auditor.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/auto-triage-issues.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/audit-workflows.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/artifacts-summary.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/archie.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/ai-moderator.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/agentic-observability-kit.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/agent-persona-explorer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/agent-performance-analyzer.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.
.github/workflows/ace-editor.lock.yml	Regenerated lock workflow to include `GH_AW_CONTEXT_WORKFLOW_REF` env injection.

Comments suppressed due to low confidence (1)

actions/setup/js/check_workflow_timestamp_api.cjs:14

The header comment still says the GitHub API path uses GITHUB_WORKFLOW_REF to identify the source repo, but the implementation now prefers GH_AW_CONTEXT_WORKFLOW_REF (falling back to GITHUB_WORKFLOW_REF). Please update the docstring bullets to reflect the actual precedence/behavior so readers don’t rely on the wrong variable.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-04-03T02:37:06Z

pkg/workflow/compiler_activation_job.go

@@ -186,6 +186,11 @@ func (c *Compiler) buildActivationJob(data *WorkflowData, preActivationJobCreate
 		steps = append(steps, fmt.Sprintf("        uses: %s\n", GetActionPin("actions/github-script")))
 		steps = append(steps, "        env:\n")
 		steps = append(steps, fmt.Sprintf("          GH_AW_WORKFLOW_FILE: \"%s\"\n", lockFilename))
+		// Inject the GitHub Actions context workflow_ref expression so that check_workflow_timestamp_api.cjs


This step is named/commented as a “timestamp” check, but check_workflow_timestamp_api.cjs now performs a frontmatter hash comparison to detect stale lock files. Consider renaming the step (and/or updating the adjacent comment) to match the actual behavior to avoid confusion when reading logs and debugging.

pelikhan · 2026-04-03T04:27:00Z

@copilot Merge main and recompile

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/97c9cdb2-7e8e-4562-a922-8158e8054ccf Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-04-03T04:35:15Z

@copilot Merge main and recompile

Done in commit fb9257d. Merged main (33a0577, c0865b8, 790e8ca, 7122e61, cb732db), resolved conflicts in check_workflow_timestamp_api.test.cjs, rebuilt binary, and recompiled all 183 lock files.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw -pack /home/REDACTED/work/gh-aw/gh-aw/cmd/gh-aw/main.go (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha (http block)
https://api.github.com/repos/github/gh-aw
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .visibility (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0 --jq .object.sha (http block)
https://api.github.com/repos/githubnext/agentics/git/ref/tags/
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

pelikhan · 2026-04-03T04:35:56Z

@copilot review comments

…lock file' Agent-Logs-Url: https://github.com/github/gh-aw/sessions/aebf385c-f9e8-40e7-a40b-bb37f5e548fd Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-04-03T04:43:25Z

@copilot review comments

Done in commit a2b5f44. Renamed the step from "Check workflow file timestamps" to "Check workflow lock file" and updated the adjacent comment to describe the actual frontmatter hash comparison behavior. Updated all test fixtures, golden files, and lock files accordingly.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw committer.name _modules/.bin/no--show-toplevel git rev-�� --show-toplevel git /usr/bin/git ithub/workflows copilot/fix-remorev-parse x_amd64/vet git (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw ache/go/1.25.0/xrev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel ache/go/1.25.0/xrev-parse /usr/bin/git git (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha -unreachable=false /tmp/go-build2979667002/b190/vet.cfg /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet ath ../../../.prgit rty repository(owne--show-toplevel /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -ato�� -bool -buildtags /opt/hostedtoolcache/node/24.14.0/x64/bin/bash -errorsas -ifaceassert -nilfunc bash (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha 64/pkg/tool/linu--show-toplevel git /opt/hostedtoolcache/node/24.14.0/x64/bin/node --show-toplevel 64/pkg/tool/linurev-parse /usr/bin/git node js/f�� 64/pkg/tool/linu--show-toplevel git /opt/hostedtoolcache/node/24.14.0/x64/bin/bash --show-toplevel 64/pkg/tool/linurev-parse /usr/bin/git bash (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha te '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' --ignore-path ../../../.prettieriggit -f flow.test -f owner=github -f flow.test 8677�� --noprofile (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha --show-toplevel git 0/x64/bin/node --show-toplevel git /usr/bin/git git cjs --show-toplevel git ache/node/24.14.0/x64/bin/node --show-toplevel git /usr/bin/git git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha ithub/workflows user.email er: String!, $na-nilfunc (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --noprofile -tests /usr/bin/git js/**/*.json' --git --local /sadc git rev-�� --show-toplevel /sadc /usr/bin/git ithub/workflows --local /home/REDACTED/.lo--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --show-toplevel x_amd64/vet /usr/bin/git .js' --ignore-pagit erena-mcp-serverrev-parse x_amd64/vet git rev-�� --show-toplevel x_amd64/vet /usr/bin/git k/gh-aw/gh-aw/.ggit (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha -unreachable=false /tmp/go-build2979667002/b011/vet.cfg /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet ignore-path ../.git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha -unreachable=false /tmp/go-build2979667002/b020/vet.cfg 9667002/b246/vet.cfg ignore-path ../.git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha --show-toplevel x_amd64/vet /usr/bin/git --get remote.origin.urrev-parse x_amd64/vet git rev-�� --show-toplevel x_amd64/vet /usr/bin/git k/gh-aw/gh-aw/.ggit rev-parse 64/pkg/tool/linu--show-toplevel git (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha linuxagent-logcollector.slice c counting=yes yAccounting=yes ota=5% yHigh=170M (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha /tmp/go-build2979667002/b357/_pkg_.a -trimpath 9667002/b282/vet.cfg -p github.com/stretrev-parse -lang=go1.17 /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -uns�� -unreachable=false /tmp/go-build2979667002/b100/vet.cfg /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -c=4 -nolocalimports -importcfg /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha -unreachable=false /tmp/go-build2979667002/b024/vet.cfg 9667002/b273/vet.cfg ignore-path ../.git (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha -unreachable=false /tmp/go-build2979667002/b016/vet.cfg 9667002/b280/vet.cfg ignore-path ../.git description,relerev-parse r: $owner, name:--show-toplevel /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -ato�� -bool -buildtags /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -errorsas -ifaceassert -nilfunc /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel x_amd64/vet /usr/bin/git git rev-�� --show-toplevel git /opt/hostedtoolcache/node/24.14.0/x64/bin/node --show-toplevel 64/pkg/tool/linurev-parse /usr/bin/git node (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha -unreachable=false /tmp/go-build2979667002/b015/vet.cfg 9667002/b262/vet.cfg ignore-path ../.git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel x_amd64/vet /usr/bin/git git rev-�� --show-toplevel git /opt/hostedtoolcache/node/24.14.0/x64/bin/node --show-toplevel 64/pkg/tool/linurev-parse /usr/bin/git node (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha (http block)
https://api.github.com/repos/github/gh-aw
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .visibility (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0 --jq .object.sha (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq .object.sha /tmp/go-build2979667002/b126/_pkg_.a -trimpath /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -p github.com/aymanrev-parse -lang=go1.24 /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -ato�� rt -buildtags /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -errorsas -ifaceassert -nilfunc /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel x_amd64/vet /usr/bin/git git rev-�� --show-toplevel git /opt/hostedtoolcache/node/24.14.0/x64/bin/node tags/v6 64/pkg/tool/linurev-parse /usr/bin/git node (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq .object.sha /home/REDACTED/work/gh-aw/gh-aw/.github/workflows X6D161nAi 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq .object.sha --show-toplevel git 0/x64/bin/node --show-toplevel -tests /usr/bin/git git rev-�� --show-toplevel git 0/x64/bin/node --show-toplevel git /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq .object.sha graphql .cfg 64/pkg/tool/linux_amd64/vet -f owner=github -f 64/pkg/tool/linux_amd64/vet imag�� /js && npm run format:pkg-json --silent >/dev/nu-errorsas .cfg ache/go/1.25.0/x64/pkg/tool/linux_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq .object.sha --show-toplevel git 0/x64/bin/node --show-toplevel -tests /usr/bin/git git rev-�� --show-toplevel git 0/x64/bin/node --show-toplevel git /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq .object.sha --show-toplevel -tests /usr/bin/git ithub/workflows --local /home/REDACTED/go/--show-toplevel git rev-�� --show-toplevel git /usr/bin/git on' --ignore-patgit credential.helpeshow-ref /opt/hostedtoolc--verify git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq .object.sha --show-toplevel git /usr/bin/git ch ache/go/1.25.0/xrev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel ache/go/1.25.0/xshow-ref /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha get --local sh committer.name (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git /home/REDACTED/wornode on ache/go/1.25.0/x64/pkg/tool/linu--show-toplevel git rev-�� /v0.47.4 ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git se 9667002/b105/vetjs/fuzz_sanitize_label_harness.cjs .cfg git (http block)
https://api.github.com/repos/githubnext/agentics/git/ref/tags/
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha (http block)
https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha ef/tags/# --local /home/REDACTED/.do-nilfunc committer.name (http block)
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha --show-toplevel 64/pkg/tool/linux_amd64/link ch iles formatted" config .cfg git rev-�� --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git se 9667002/b128/vetjs/fuzz_sanitize_label_harness.cjs ache/go/1.25.0/x64/pkg/tool/linu--show-toplevel git (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Initial plan

9cf721b

Copilot AI assigned Copilot and pelikhan Apr 3, 2026

Copilot started work on behalf of pelikhan April 3, 2026 00:54 View session

Copilot AI linked an issue Apr 3, 2026 that may be closed by this pull request

Remote workflow_call appears broken #24199

Closed

This was referenced Apr 3, 2026

[PR Triage Report] PR Triage Report - 2026-04-03 #24202

Open

Smoke Test: Claude - 23928948104 #24205

Closed

Smoke Test: Copilot - 23929084504 #24207

Closed

Copilot AI changed the title ~~[WIP] Fix remote workflow_call issue in action~~ Fix cross-repo workflow_call integrity check: use github.workflow_ref instead of GITHUB_WORKFLOW_REF Apr 3, 2026

Copilot AI requested a review from pelikhan April 3, 2026 01:18

Copilot finished work on behalf of pelikhan April 3, 2026 01:18

Copilot started work on behalf of pelikhan April 3, 2026 01:50 View session

test: add same-repo scenario tests for GH_AW_CONTEXT_WORKFLOW_REF cov…

538df40

…erage Agent-Logs-Url: https://github.com/github/gh-aw/sessions/7e532aa5-50a0-41e2-9fa9-00407921a08e Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan April 3, 2026 01:58

Copilot started work on behalf of pelikhan April 3, 2026 02:18 View session

fix: align CJS error messages with main branch to fix CI test failures

f8d58bb

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/f49e39ad-fc0f-44fc-a75c-4c451342b736 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan April 3, 2026 02:31

pelikhan marked this pull request as ready for review April 3, 2026 02:32

Copilot AI review requested due to automatic review settings April 3, 2026 02:32

Copilot started reviewing on behalf of pelikhan April 3, 2026 02:33 View session

Copilot AI reviewed Apr 3, 2026

View reviewed changes

Copilot started work on behalf of pelikhan April 3, 2026 04:27 View session

merge: merge main and recompile all lock files

fb9257d

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/97c9cdb2-7e8e-4562-a922-8158e8054ccf Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan April 3, 2026 04:35

Copilot started work on behalf of pelikhan April 3, 2026 04:36 View session

pelikhan and others added 2 commits April 2, 2026 21:39

Merge branch 'main' into copilot/fix-remote-workflow-call-broken

2bccc5a

fix: rename 'Check workflow file timestamps' step to 'Check workflow …

a2b5f44

…lock file' Agent-Logs-Url: https://github.com/github/gh-aw/sessions/aebf385c-f9e8-40e7-a40b-bb37f5e548fd Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan April 3, 2026 04:44

pelikhan merged commit 159a88a into main Apr 3, 2026
85 checks passed

pelikhan deleted the copilot/fix-remote-workflow-call-broken branch April 3, 2026 04:48

github-actions bot mentioned this pull request Apr 3, 2026

[aw] No-Op Runs #24257

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fix cross-repo workflow_call integrity check: use github.workflow_ref instead of GITHUB_WORKFLOW_REF#24200

Fix cross-repo workflow_call integrity check: use github.workflow_ref instead of GITHUB_WORKFLOW_REF#24200
pelikhan merged 7 commits intomainfrom
copilot/fix-remote-workflow-call-broken

Copilot AI commented Apr 3, 2026 •

edited

Loading

Uh oh!

pelikhan commented Apr 3, 2026

Uh oh!

Copilot AI commented Apr 3, 2026

Uh oh!

pelikhan commented Apr 3, 2026

Uh oh!

Copilot AI commented Apr 3, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Apr 3, 2026

Uh oh!

pelikhan commented Apr 3, 2026

Uh oh!

Copilot AI commented Apr 3, 2026 •

edited

Loading

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

pelikhan commented Apr 3, 2026

Uh oh!

Copilot AI commented Apr 3, 2026 •

edited

Loading

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

Copilot AI commented Apr 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Root cause

Changes

Uh oh!

pelikhan commented Apr 3, 2026

Uh oh!

Copilot AI commented Apr 3, 2026

Uh oh!

pelikhan commented Apr 3, 2026

Uh oh!

Copilot AI commented Apr 3, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Apr 3, 2026

Choose a reason for hiding this comment

Uh oh!

pelikhan commented Apr 3, 2026

Uh oh!

Copilot AI commented Apr 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

pelikhan commented Apr 3, 2026

Uh oh!

Copilot AI commented Apr 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Apr 3, 2026 •

edited

Loading

Copilot AI commented Apr 3, 2026 •

edited

Loading

Copilot AI commented Apr 3, 2026 •

edited

Loading