diff --git a/.github/workflows/ci-doctor.lock.yml b/.github/workflows/ci-doctor.lock.yml index 6f123619677..16a82bf9ab0 100644 --- a/.github/workflows/ci-doctor.lock.yml +++ b/.github/workflows/ci-doctor.lock.yml @@ -1022,7 +1022,7 @@ jobs: # Show last few lines for debugging echo "=== Last 10 lines of Claude execution log ===" tail -10 /tmp/ci-failure-doctor.log || echo "No log content available" - - name: Print Agent output + - name: Print Safe Outputs env: GITHUB_AW_SAFE_OUTPUTS: ${{ env.GITHUB_AW_SAFE_OUTPUTS }} run: | @@ -1040,7 +1040,7 @@ jobs: fi echo '``````' >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY - - name: Upload agentic output file + - name: Upload Safe Outputs if: always() uses: actions/upload-artifact@v4 with: diff --git a/.github/workflows/dev.lock.yml b/.github/workflows/dev.lock.yml index debf1c63cf4..c5f54e89f6d 100644 --- a/.github/workflows/dev.lock.yml +++ b/.github/workflows/dev.lock.yml @@ -980,7 +980,7 @@ jobs: # Show last few lines for debugging echo "=== Last 10 lines of Copilot execution log ===" tail -10 /tmp/dev.log || echo "No log content available" - - name: Print Agent output + - name: Print Safe Outputs env: GITHUB_AW_SAFE_OUTPUTS: ${{ env.GITHUB_AW_SAFE_OUTPUTS }} run: | @@ -998,7 +998,7 @@ jobs: fi echo '``````' >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY - - name: Upload agentic output file + - name: Upload Safe Outputs if: always() uses: actions/upload-artifact@v4 with: diff --git a/.github/workflows/tidy.lock.yml b/.github/workflows/tidy.lock.yml index 694d40671e1..7e34b6fb010 100644 --- a/.github/workflows/tidy.lock.yml +++ b/.github/workflows/tidy.lock.yml @@ -914,7 +914,7 @@ jobs: # Show last few lines for debugging echo "=== Last 10 lines of Copilot execution log ===" tail -10 /tmp/code-tidying-agent.log || echo "No log content available" - - name: Print Agent output + - name: Print Safe Outputs env: GITHUB_AW_SAFE_OUTPUTS: ${{ env.GITHUB_AW_SAFE_OUTPUTS }} run: | @@ -932,7 +932,7 @@ jobs: fi echo '``````' >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY - - name: Upload agentic output file + - name: Upload Safe Outputs if: always() uses: actions/upload-artifact@v4 with: diff --git a/pkg/cli/workflows/test-all.lock.yml b/pkg/cli/workflows/test-all.lock.yml index 0de3aec5615..07b1a3f7ad5 100644 --- a/pkg/cli/workflows/test-all.lock.yml +++ b/pkg/cli/workflows/test-all.lock.yml @@ -1457,7 +1457,7 @@ jobs: # Show last few lines for debugging echo "=== Last 10 lines of Claude execution log ===" tail -10 /tmp/comprehensive-test-agentic-workflow-poem-bot.log || echo "No log content available" - - name: Print Agent output + - name: Print Safe Outputs env: GITHUB_AW_SAFE_OUTPUTS: ${{ env.GITHUB_AW_SAFE_OUTPUTS }} run: | @@ -1475,7 +1475,7 @@ jobs: fi echo '``````' >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY - - name: Upload agentic output file + - name: Upload Safe Outputs if: always() uses: actions/upload-artifact@v4 with: diff --git a/pkg/cli/workflows/test-claude-max-patch-size.lock.yml b/pkg/cli/workflows/test-claude-max-patch-size.lock.yml index 3935da15ac4..8bfbab65f7d 100644 --- a/pkg/cli/workflows/test-claude-max-patch-size.lock.yml +++ b/pkg/cli/workflows/test-claude-max-patch-size.lock.yml @@ -950,7 +950,7 @@ jobs: # Show last few lines for debugging echo "=== Last 10 lines of Claude execution log ===" tail -10 /tmp/test-claude-patch-size-validation.log || echo "No log content available" - - name: Print Agent output + - name: Print Safe Outputs env: GITHUB_AW_SAFE_OUTPUTS: ${{ env.GITHUB_AW_SAFE_OUTPUTS }} run: | @@ -968,7 +968,7 @@ jobs: fi echo '``````' >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY - - name: Upload agentic output file + - name: Upload Safe Outputs if: always() uses: actions/upload-artifact@v4 with: diff --git a/pkg/cli/workflows/test-claude-missing-tool.lock.yml b/pkg/cli/workflows/test-claude-missing-tool.lock.yml index 3f4dda35b53..4679df5d7ce 100644 --- a/pkg/cli/workflows/test-claude-missing-tool.lock.yml +++ b/pkg/cli/workflows/test-claude-missing-tool.lock.yml @@ -1009,7 +1009,7 @@ jobs: # Show last few lines for debugging echo "=== Last 10 lines of Claude execution log ===" tail -10 /tmp/test-claude-with-missing-tool-safe-output-and-cache-memory.log || echo "No log content available" - - name: Print Agent output + - name: Print Safe Outputs env: GITHUB_AW_SAFE_OUTPUTS: ${{ env.GITHUB_AW_SAFE_OUTPUTS }} run: | @@ -1027,7 +1027,7 @@ jobs: fi echo '``````' >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY - - name: Upload agentic output file + - name: Upload Safe Outputs if: always() uses: actions/upload-artifact@v4 with: diff --git a/pkg/cli/workflows/test-claude-patch-size-exceeded.lock.yml b/pkg/cli/workflows/test-claude-patch-size-exceeded.lock.yml index 2009b9837a5..b2a197096b9 100644 --- a/pkg/cli/workflows/test-claude-patch-size-exceeded.lock.yml +++ b/pkg/cli/workflows/test-claude-patch-size-exceeded.lock.yml @@ -952,7 +952,7 @@ jobs: # Show last few lines for debugging echo "=== Last 10 lines of Claude execution log ===" tail -10 /tmp/test-claude-patch-size-limit-exceeded.log || echo "No log content available" - - name: Print Agent output + - name: Print Safe Outputs env: GITHUB_AW_SAFE_OUTPUTS: ${{ env.GITHUB_AW_SAFE_OUTPUTS }} run: | @@ -970,7 +970,7 @@ jobs: fi echo '``````' >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY - - name: Upload agentic output file + - name: Upload Safe Outputs if: always() uses: actions/upload-artifact@v4 with: diff --git a/pkg/cli/workflows/test-copilot-max-patch-size.lock.yml b/pkg/cli/workflows/test-copilot-max-patch-size.lock.yml index 9369381a1b4..647291e8a37 100644 --- a/pkg/cli/workflows/test-copilot-max-patch-size.lock.yml +++ b/pkg/cli/workflows/test-copilot-max-patch-size.lock.yml @@ -774,7 +774,7 @@ jobs: # Show last few lines for debugging echo "=== Last 10 lines of Copilot execution log ===" tail -10 /tmp/test-copilot-patch-size-validation.log || echo "No log content available" - - name: Print Agent output + - name: Print Safe Outputs env: GITHUB_AW_SAFE_OUTPUTS: ${{ env.GITHUB_AW_SAFE_OUTPUTS }} run: | @@ -792,7 +792,7 @@ jobs: fi echo '``````' >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY - - name: Upload agentic output file + - name: Upload Safe Outputs if: always() uses: actions/upload-artifact@v4 with: diff --git a/pkg/cli/workflows/test-copilot-missing-tool.lock.yml b/pkg/cli/workflows/test-copilot-missing-tool.lock.yml index 1215029fecc..40437414f23 100644 --- a/pkg/cli/workflows/test-copilot-missing-tool.lock.yml +++ b/pkg/cli/workflows/test-copilot-missing-tool.lock.yml @@ -831,7 +831,7 @@ jobs: # Show last few lines for debugging echo "=== Last 10 lines of Copilot execution log ===" tail -10 /tmp/test-copilot-with-missing-tool-safe-output-and-cache-memory.log || echo "No log content available" - - name: Print Agent output + - name: Print Safe Outputs env: GITHUB_AW_SAFE_OUTPUTS: ${{ env.GITHUB_AW_SAFE_OUTPUTS }} run: | @@ -849,7 +849,7 @@ jobs: fi echo '``````' >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY - - name: Upload agentic output file + - name: Upload Safe Outputs if: always() uses: actions/upload-artifact@v4 with: diff --git a/pkg/cli/workflows/test-copilot-patch-size-exceeded.lock.yml b/pkg/cli/workflows/test-copilot-patch-size-exceeded.lock.yml index 166a20157e1..e256fb754bd 100644 --- a/pkg/cli/workflows/test-copilot-patch-size-exceeded.lock.yml +++ b/pkg/cli/workflows/test-copilot-patch-size-exceeded.lock.yml @@ -776,7 +776,7 @@ jobs: # Show last few lines for debugging echo "=== Last 10 lines of Copilot execution log ===" tail -10 /tmp/test-copilot-patch-size-limit-exceeded.log || echo "No log content available" - - name: Print Agent output + - name: Print Safe Outputs env: GITHUB_AW_SAFE_OUTPUTS: ${{ env.GITHUB_AW_SAFE_OUTPUTS }} run: | @@ -794,7 +794,7 @@ jobs: fi echo '``````' >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY - - name: Upload agentic output file + - name: Upload Safe Outputs if: always() uses: actions/upload-artifact@v4 with: diff --git a/pkg/cli/workflows/test-playwright-accessibility-contrast.lock.yml b/pkg/cli/workflows/test-playwright-accessibility-contrast.lock.yml index b915c7d1fe3..4dfc636e54f 100644 --- a/pkg/cli/workflows/test-playwright-accessibility-contrast.lock.yml +++ b/pkg/cli/workflows/test-playwright-accessibility-contrast.lock.yml @@ -967,7 +967,7 @@ jobs: # Show last few lines for debugging echo "=== Last 10 lines of Claude execution log ===" tail -10 /tmp/test-playwright-accessibility-contrast.log || echo "No log content available" - - name: Print Agent output + - name: Print Safe Outputs env: GITHUB_AW_SAFE_OUTPUTS: ${{ env.GITHUB_AW_SAFE_OUTPUTS }} run: | @@ -985,7 +985,7 @@ jobs: fi echo '``````' >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY - - name: Upload agentic output file + - name: Upload Safe Outputs if: always() uses: actions/upload-artifact@v4 with: diff --git a/pkg/cli/workflows/test-playwright-screenshots.lock.yml b/pkg/cli/workflows/test-playwright-screenshots.lock.yml index 3df33fdfe24..c04b4d8f9a1 100644 --- a/pkg/cli/workflows/test-playwright-screenshots.lock.yml +++ b/pkg/cli/workflows/test-playwright-screenshots.lock.yml @@ -1115,7 +1115,7 @@ jobs: # Show last few lines for debugging echo "=== Last 10 lines of Claude execution log ===" tail -10 /tmp/dev.log || echo "No log content available" - - name: Print Agent output + - name: Print Safe Outputs env: GITHUB_AW_SAFE_OUTPUTS: ${{ env.GITHUB_AW_SAFE_OUTPUTS }} run: | @@ -1133,7 +1133,7 @@ jobs: fi echo '``````' >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY - - name: Upload agentic output file + - name: Upload Safe Outputs if: always() uses: actions/upload-artifact@v4 with: diff --git a/pkg/cli/workflows/test-safe-jobs.lock.yml b/pkg/cli/workflows/test-safe-jobs.lock.yml index 30c7b6bb4ed..a317c032115 100644 --- a/pkg/cli/workflows/test-safe-jobs.lock.yml +++ b/pkg/cli/workflows/test-safe-jobs.lock.yml @@ -1153,7 +1153,7 @@ jobs: # Show last few lines for debugging echo "=== Last 10 lines of Claude execution log ===" tail -10 /tmp/test-safe-jobs.log || echo "No log content available" - - name: Print Agent output + - name: Print Safe Outputs env: GITHUB_AW_SAFE_OUTPUTS: ${{ env.GITHUB_AW_SAFE_OUTPUTS }} run: | @@ -1171,7 +1171,7 @@ jobs: fi echo '``````' >> $GITHUB_STEP_SUMMARY echo "" >> $GITHUB_STEP_SUMMARY - - name: Upload agentic output file + - name: Upload Safe Outputs if: always() uses: actions/upload-artifact@v4 with: diff --git a/pkg/workflow/agentic_output_test.go b/pkg/workflow/agentic_output_test.go index 88058e9aa28..7f3073bc0b6 100644 --- a/pkg/workflow/agentic_output_test.go +++ b/pkg/workflow/agentic_output_test.go @@ -69,8 +69,8 @@ This workflow tests the agentic output collection functionality. t.Error("Expected 'Ingest agent output' step to be in generated workflow") } - if !strings.Contains(lockContent, "- name: Upload agentic output file") { - t.Error("Expected 'Upload agentic output file' step to be in generated workflow") + if !strings.Contains(lockContent, "- name: Upload Safe Outputs") { + t.Error("Expected 'Upload Safe Outputs' step to be in generated workflow") } if !strings.Contains(lockContent, "- name: Upload sanitized agent output") { @@ -101,13 +101,13 @@ This workflow tests the agentic output collection functionality. t.Error("Claude workflow should NOT reference 'agent_outputs' artifact (Claude CLI no longer produces output.txt)") } - // Verify Print Agent output step has file existence check + // Verify Print Safe Outputs step has file existence check if !strings.Contains(lockContent, "if [ -f ${{ env.GITHUB_AW_SAFE_OUTPUTS }} ]; then") { - t.Error("Expected Print Agent output step to check if output file exists before reading it") + t.Error("Expected Print Safe Outputs step to check if output file exists before reading it") } if !strings.Contains(lockContent, "No agent output file found") { - t.Error("Expected Print Agent output step to provide message when no output file found") + t.Error("Expected Print Safe Outputs step to provide message when no output file found") } // Verify that both artifacts are uploaded @@ -177,8 +177,8 @@ This workflow tests that Codex engine gets GITHUB_AW_SAFE_OUTPUTS but not engine t.Error("Codex workflow should have 'Ingest agent output' step (GITHUB_AW_SAFE_OUTPUTS functionality)") } - if !strings.Contains(lockContent, "- name: Upload agentic output file") { - t.Error("Codex workflow should have 'Upload agentic output file' step (GITHUB_AW_SAFE_OUTPUTS functionality)") + if !strings.Contains(lockContent, "- name: Upload Safe Outputs") { + t.Error("Codex workflow should have 'Upload Safe Outputs' step (GITHUB_AW_SAFE_OUTPUTS functionality)") } if !strings.Contains(lockContent, "- name: Upload sanitized agent output") { diff --git a/pkg/workflow/compiler.go b/pkg/workflow/compiler.go index eae74f2294e..705c9c96bd7 100644 --- a/pkg/workflow/compiler.go +++ b/pkg/workflow/compiler.go @@ -2273,7 +2273,7 @@ func (c *Compiler) generateSafeOutputsConfig(data *WorkflowData) string { // generateOutputCollectionStep generates a step that reads the output file and sets it as a GitHub Actions output func (c *Compiler) generateOutputCollectionStep(yaml *strings.Builder, data *WorkflowData) { - yaml.WriteString(" - name: Print Agent output\n") + yaml.WriteString(" - name: Print Safe Outputs\n") yaml.WriteString(" env:\n") yaml.WriteString(" GITHUB_AW_SAFE_OUTPUTS: ${{ env.GITHUB_AW_SAFE_OUTPUTS }}\n") yaml.WriteString(" run: |\n") @@ -2292,7 +2292,7 @@ func (c *Compiler) generateOutputCollectionStep(yaml *strings.Builder, data *Wor yaml.WriteString(" echo '``````' >> $GITHUB_STEP_SUMMARY\n") yaml.WriteString(" echo \"\" >> $GITHUB_STEP_SUMMARY\n") - yaml.WriteString(" - name: Upload agentic output file\n") + yaml.WriteString(" - name: Upload Safe Outputs\n") yaml.WriteString(" if: always()\n") yaml.WriteString(" uses: actions/upload-artifact@v4\n") yaml.WriteString(" with:\n")