Refactor duplicated workflow YAML parsing and promote shared slice/sanitization utilities by Copilot · Pull Request #30926 · github/gh-aw

Copilot · 2026-05-08T03:50:56Z

Semantic clustering identified repeated parsing boilerplate and generic helpers trapped in workflow. This PR centralizes the duplicated YAML read/parse flow and moves reusable slice/sanitization primitives into shared utility packages while preserving existing workflow-facing APIs.

Workflow YAML parsing: single shared path
- Added readWorkflowYAML(workflowPath string) (map[string]any, error) in pkg/workflow/yaml.go.
- Replaced duplicated read/clean/unmarshal blocks in:
  - extractPermissionsFromYAMLFile
  - extractSecretsFromWorkflowFile
  - extractWorkflowCallInputs
  - extractWorkflowDispatchInputs
- Kept existing caller behavior and error shape; documented trusted-path contract on the helper.
Generic slice helpers moved to sliceutil
- Added:
  - sliceutil.MergeUnique[T comparable](base []T, extra ...T) []T
  - sliceutil.Exclude[T comparable](base []T, exclude ...T) []T
- Updated workflow call sites (imports, runtime/safe-output config generation) to use shared helpers.
- Removed now-redundant local mergeUnique / excludeFromSlice from runtime_definitions.go.
Core sanitizer moved to stringutil with compatibility wrapper
- Moved SanitizeName + SanitizeOptions implementation to pkg/stringutil/sanitize.go.
- Preserved workflow API via type alias + delegating wrapper in pkg/workflow/strings.go, so existing workflow callers remain unchanged.
Focused test/doc updates
- Added pkg/workflow/yaml_read_test.go for helper contract and parse-path coverage.
- Added tests for MergeUnique/Exclude in pkg/sliceutil/sliceutil_test.go.
- Added tests for stringutil.SanitizeName in pkg/stringutil/sanitize_test.go.
- Updated pkg/sliceutil/README.md to include the new public APIs.

// centralized caller pattern
workflow, err := readWorkflowYAML(workflowPath)
if err != nil {
    return nil, err
}
return extractWorkflowCallInputsFromParsed(workflow), nil

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh gh repo view --json owner,name --jq .owner.login + "/" + .name cfg -n1 --format=format:rev-parse --end-of-options--show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /hom�� 851936595 DefaultBranchFromLsRemoteWithRealGitmain_branch510408449/001' ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet **/*.json --ignore-path ../../../.prettierignore ache/go/1.25.8/x64/pkg/tool/linuTest User (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw **/*.json --ignore-path Q9JjIZREDlYiHWP_71/KDaUrle63TPPPS1tZJmA/SqW9rykMremote (http block)
https://api.github.com/orgs/test-owner/actions/secrets
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name (http block)
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name ath ../../../.prettierignore git /usr/bin/git --show-toplevel git /usr/bin/gh git er on-clustering-yet-again gh x_amd64/vet ithub-script/gitgit --jq bject.type] | @tuser.name x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name h ../../../.prettierignore git sv --show-toplevel git /usr/bin/git git rev-�� w/js/**/*.json' --ignore-path git x_amd64/asm /ref/tags/v4 /tmp/go-build452rev-parse /usr/bin/git x_amd64/asm (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 /tmp/go-build464570283/b400/agentdrain.test sv -test.paniconexigit -test.v=true /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git ithub-script/gitgh config bject.type] | @t/repos/actions/github-script/git/ref/tags/v9 git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel node /usr/bin/infocmp runs/20260508-04git --write 1/x64/bin/node infocmp -1 xterm-color 1/x64/bin/node /usr/bin/git -bool -buildtags ache/node/24.14./repos/actions/github-script/git/ref/tags/v9 git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel sh /usr/bin/infocmp ithub-script/gitgit 4265462/b405/_terev-parse (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 64/pkg/tool/linu--jq sv rite '**/*.cjs' gh cfg 64/pkg/tool/linu/repos/actions/github-script/git/ref/tags/v9 git rev-�� --show-toplevel 64/pkg/tool/linutest@example.com /usr/bin/git LsRemoteWithRealgit LsRemoteWithRealrev-parse 64/pkg/tool/linu--show-toplevel /usr/bin/git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 x_amd64/vet sv 8106827/b001/_pkgh node tions/node_modul/repos/actions/github-script/git/ref/tags/v9 git conf�� --get remote.origin.url /usr/bin/git */*.ts' '**/*.jsgit gh de/node/bin/sh /usr/bin/git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 x_amd64/vet sv --show-toplevel git ules/.bin/node git rev-�� --show-toplevel git /usr/bin/git 447b79162b3a3c50git git ache/uv/0.11.11/--show-toplevel /usr/bin/git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv 5628-15153/test-681711479 -buildtags /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -errorsas -ifaceassert -nilfunc /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet 5702�� -unreachable=false 570283/b396/_testmain.go /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/link (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 git bject.type] | @tsv --show-toplevel (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 gh bject.type] | @tsv /repos/actions/ggit --jq (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv runs/20260508-035628-15153/test-681711479 --jq /usr/bin/git to pkg/actionpingit (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /tmp/TestHashConsistency_GoAndJavaScript2592817081/001/test-complex-frontmatter--errorsas (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv waysRecompiles1455787118/001 x_amd64/vet /usr/bin/git '**/*.ts' '**/*.git (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv xterm-color git /usr/bin/git --show-toplevel x_amd64/vet /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git /ref/tags/v9 other sv git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv xterm-color git /usr/bin/git .md md /usr/bin/git git rev-�� --show-toplevel git /usr/bin/infocmp ; printf '%s' "$git git st.md","valid":t--show-toplevel infocmp (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv to pkg/actionpins/data/action_pins.json and pkg/workflow/data/action_pins.json..." (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv .github/workflows (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9.0.0
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv json' --ignore-p-errorsas (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv -template-expressions.md (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git /ref/tags/v9 -importcfg sv git rev-�� --show-toplevel /opt/hostedtoolc--jq /usr/bin/git /v2.0.0 /tmp/go-build464rev-parse sv git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git SameOutput308316gh git /snap/bin/sh git rev-�� --show-toplevel sh /usr/bin/git "prettier" --wrigit =develop ache/node/24.14.--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git --noprofile git ache/node/24.14.xterm-color git rev-�� --show-toplevel sh /usr/bin/git sistency_GoAndJagit git 4265462/b125/vet--show-toplevel git (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /tmp/file-tracker-test1492190727/test1.md /tmp/file-tracker-test1492190727/test2.lock.yml /usr/bin/git */*.json' '!../.git --local x_amd64/compile git rese�� HEAD .github/workflows/test.md (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linu-goversion /usr/bin/infocmp 5628-15153/test-git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git user.name Test User /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git /ref/tags/v9 rev-parse sv git (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv runs/20260508-035628-15153/test-681711479 -buildtags ache/node/24.14.1/x64/bin/node ntent.md -ifaceassert -nilfunc infocmp t-29�� k/gh-aw/gh-aw/.github/workflows/ai-moderator.md -tests ache/node/24.14.1/x64/bin/node (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv ErrorFormatting1034397824/001 (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 resolved$ sv '**/*.ts' '**/*.git (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel 02zfbN4/uSkbk2BocNu6uh6Xsdg3 /usr/bin/git --get-regexp --global x_amd64/vet git conf�� user.email test@example.com /usr/bin/git erate-action-metgit --local x_amd64/vet git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv k/_temp/uv-pytho--objects git /usr/bin/git 1824dda2:pkg/sligit gh /usr/bin/git git rev-�� --show-toplevel git .cfg Gitcustom_branchgit Gitcustom_branchrev-parse bin/git git (http block)
https://api.github.com/repos/aws-actions/configure-aws-credentials/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/compile-insgit config /usr/bin/infocmp--show-toplevel git rev-�� --show-toplevel infocmp /usr/bin/git xterm-color x_amd64/vet /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 e/git bject.type] | @tsv --show-toplevel s/4/artifacts /usr/bin/git gh api /repos/actions/setup-node/git/ref/tags/v6 --jq /usr/bin/gh /ref/tags/v9 resolved$ sv gh (http block)
- Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/TestGuardPogit config /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel node /usr/bin/git /tmp/TestHashCongh x_amd64/compile /usr/bin/git git (http block)
https://api.github.com/repos/azure/login/git/ref/tags/v2
- Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel node /usr/bin/git /tmp/TestHashStagit (http block)
- Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel git clusion,workflow--show-toplevel git rev-�� --show-toplevel gh /usr/bin/git /repos/actions/ginfocmp --jq me: String!) { xterm-color git (http block)
- Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/gh-aw-test-git config clusion,workflow--show-toplevel git rev-�� --show-toplevel git /usr/bin/git /tmp/gh-aw-test-infocmp l me: String!) { xterm-color git (http block)
https://api.github.com/repos/docker/login-action/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel node /usr/bin/git /tmp/TestHashCongit (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git k/gh-aw/gh-aw/pkgit remote /usr/bin/git git rev-�� /ref/tags/v9 git sv /ref/tags/v9 remote sv git (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� /ref/tags/v9 git sv /ref/tags/v9 config sv git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/gh SameOutput186870gh /tmp/go-build464api e/git gh api /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git mplied /tmp/go-build464-1 ache/node/24.14.xterm-color git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/gh 804186680 ep/bin/linux-x64rev-parse e/git gh api /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git 3 git 391810/b399/vet.xterm-color git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/gh ithub/workflows/gh infocmp ache/go/1.25.8/x/repos/actions/github-script/git/ref/tags/v9 gh api /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git npx prettier --winfocmp git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv /home/REDACTED/work/gh-aw/gh-aw/.github/workflows/architecture-guardian.md infocmp (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 x_amd64/vet sv 92632337/001 92632337/002/worrev-parse x_amd64/vet git add /ref/tags/v9 x_amd64/vet sv it} flow-ci-test-678rev-parse 64/pkg/tool/linu--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 git sv json' --ignore-pgit gh n-dir/git git rev-�� /ref/tags/v9 infocmp sv ty-test.md git tnet/tools/git git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-05-01 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-04-08 w (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-02-07 (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name (http block)
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 570283/b025/vet.cfg cfg ./../.prettieriggit (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name ude_engine_test.go test --show-toplevel git /usr/bin/git test 5239�� 5967/001/stability-test.md pkg/workflow/script_registry.go k/_temp/uv-python-dir/sh nore pkg/workflow/searev-parse pkg/workflow/sec--git-dir sh (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name on ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /../../.prettiergit erignore (http block)
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 cfg ache/go/1.25.8/x64/pkg/tool/linu-nilfunc /../../.prettierinfocmp erignore (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name git 64/pkg/tool/linux_amd64/link /ref/tags/v9 git /rg 64/pkg/tool/linux_amd64/link conf�� w.test /rg rtcfg.link nore eef4aec74be46f77init /usr/bin/gh 37fwcGqN0SuBHtsdtj/21b4V4PIQktjcmRmbFqq/58FqHBy0G_cwjceRSPFp (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1234567890
- Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, (http block)
- Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, ithub-script/git/ref/tags/v9 git /sh --show-toplevel /usr/bin/git (http block)
- Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, h ../../../.prettierignore rk de/node/bin/git --show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name on ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /../../.prettiergit erignore (http block)
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 on x_amd64/vet /../../.prettier/opt/hostedtoolcache/node/24.14.1/x64/bin/node erignore (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name git 64/pkg/tool/linux_amd64/vet --show-toplevel git /rg 64/pkg/tool/linux_amd64/vet -c log.showsignature=false log k/gh-aw/gh-aw/actions/node_modules/.bin/sh nore --format=format:config --end-of-optionsuser.name node (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name (http block)
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 570283/b018/vet.cfg ache/go/1.25.8/x64/pkg/tool/linu-buildmode=exe ./../.prettieriggit onpins_test (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name origin 64/pkg/tool/linux_amd64/link --show-toplevel git /usr/bin/basenamxterm-color 64/pkg/tool/linux_amd64/link fmt test basename rtcfg.link nore git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name (http block)
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 570283/b019/vet.cfg ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet ./../.prettieriggit (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name origin 64/pkg/tool/linux_amd64/vet --show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name til_test.go ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 570283/b023/vet.cfg 64/pkg/tool/linux_amd64/vet ./../.prettieriggit (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name nomaly.go 64/pkg/tool/linux_amd64/vet /ref/tags/v9 git sv 64/pkg/tool/linu^remote\..*\.gh-resolved$ -l -w pkg/workflow/call_workflow_test.go ache/node/24.14.1/x64/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin/sh nore pkg/workflow/camconfig pkg/workflow/cheuser.email node (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name (http block)
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 570283/b024/vet.cfg 64/pkg/tool/linux_amd64/vet ./../.prettieriggit (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name vice_ports.go 64/pkg/tool/linux_amd64/vet --show-toplevel git /usr/bin/git 64/pkg/tool/linux_amd64/vet -c echo "�� Go code formatted" git ache/uv/0.11.11/x86_64/sh nore Test User /usr/bin/gh sh (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 (http block)
https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md
- Triggering command: /tmp/go-build464570283/b405/cli.test /tmp/go-build464570283/b405/cli.test -test.testlogfile=/tmp/go-build464570283/b405/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true (http block)
- Triggering command: /tmp/go-build452391810/b405/cli.test /tmp/go-build452391810/b405/cli.test -test.testlogfile=/tmp/go-build452391810/b405/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true --show-toplevel git (http block)
- Triggering command: /tmp/go-build1894265462/b405/cli.test /tmp/go-build1894265462/b405/cli.test -test.testlogfile=/tmp/go-build1894265462/b405/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true --show-toplevel git /usr/bin/git git rev-�� ceutil/README.mdgo1.25.8 git modules/@npmcli/run-script/lib/node-gyp-bin/node --show-toplevel git /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/gh-aw-test-du remote 64/pkg/tool/linu/tmp/gh-aw/aw-feature-branch.patch git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/link /usr/bin/git flow.test /tmp/go-build464rev-parse rtcfg.link git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel iptables /usr/bin/git -t security om/other/repo.gi/tmp/gh-aw/aw-feature-branch.patch git rev-�� --show-toplevel node /usr/bin/gh /home/REDACTED/worgit conntrack /opt/hostedtoolc--show-toplevel gh (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel gh /usr/bin/git /repos/actions/gdu --jq om/owner/repo.gi/tmp/gh-aw/aw-feature-branch.patch git rev-�� --show-toplevel /opt/hostedtoolcache/node/24.14.1/x64/bin/node /usr/bin/gh github.event.inpgit git /usr/bin/docker gh (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv se 570283/b227/vet.cfg 64/pkg/tool/linux_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv TsH1diVXN **/*.cjs er.test **/*.json --ignore-path ../../../.pretti-v er.test 5239�� artifacts-summary.md git ache/go/1.25.8/x64/pkg/tool/linux_amd64/link rror git bject.type] | @t/tmp/TestCollectWorkflowFiles_WithImports2095867324/001 ache/go/1.25.8/xremote (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv rite '**/*.cjs' '**/*.ts' '**/*.json' --ignore-path ../../../.pr**/*.json sed p/bin/sh s/.*"branch"[[:s/usr/bin/git git /usr/bin/git git show�� te 'scripts/**/*.js' --ignore-path .prettierignore --log-level=error git .cfg ithub-script/gitgit git bject.type] | @t/tmp/TestCollectWorkflowFiles_WithImports646279360/001 git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv */*.ts' '**/*.json' --ignore-path ../../../.prettierignore --global x_amd64/vet http.https://gitgit (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv ACCEPT infocmp sh json; \ cp .gitgit gh sv git rev-�� th .prettierignore --log-level=e!../../../pkg/workflow/js/**/*.json git 64/pkg/tool/linux_amd64/cgo --show-toplevel infocmp /usr/bin/git 64/pkg/tool/linusecurity (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv json' --ignore-path ../../../.pr**/*.json gh (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv */*.ts' '**/*.json' --ignore-path ../../../.prettierignore --global x_amd64/vet http.https://git/tmp/go-build464570283/b450/stats.test (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv --get-regexp --global x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv INVALID,NEW -j DROP xterm-color git /usr/bin/git git rev-�� th .prettierignore --log-level=e!../../../pkg/workflow/js/**/*.json git 64/pkg/tool/linux_amd64/vet /ref/tags/v9 git sv 64/pkg/tool/linusecurity (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv get --global x_amd64/vet http.https://gitnode (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv json' --ignore-p--exclude-hidden=receive infocmp x86_64/sh xterm-color git /usr/bin/infocmpxterm-color git rev-�� th .prettierignore --log-level=e!../../../pkg/workflow/js/**/*.json t_schema_test.go ode_modules/.bin/node xterm-color gh /usr/bin/infocmp-t 64/pkg/tool/linusecurity (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv json' --ignore-path ../../../.pr**/*.json infocmp /usr/bin/infocmp xterm-color nly /usr/bin/git infocmp -1 th .prettierignore --log-level=error git _modules/.bin/node --show-toplevel git /usr/bin/gh git (http block)
https://api.github.com/repos/google-github-actions/auth/git/ref/tags/v2
- Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel infocmp /usr/bin/git xterm-color (http block)
- Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/TestGuardPogit remote /usr/bin/git git rev-�� --show-toplevel git /usr/bin/infocmp --get remote.origin.urrev-parse /usr/bin/git infocmp (http block)
- Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel gh /usr/bin/git ons-test16755626git --jq ow-without-react--show-toplevel git rev-�� --show-toplevel git /usr/bin/infocmp --show-toplevel git om/owner/repo.gi--show-toplevel infocmp (http block)
https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv efaultBranchFromLsRemoteWithRealGitmaster_branchremote.origin.url efaultBranchFromLsRemoteWithRealGitmaster_branch312642614/001' 1/x64/bin/node tierignore (http block)
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv eutil.go eutil_test.go 64/pkg/tool/linux_amd64/vet **/*.json --ignore-path ../../../.pretti--show-toplevel 64/pkg/tool/linux_amd64/vet ache�� "prettier" --write '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' --- gh 64/pkg/tool/linux_amd64/vet rror --jq ep/bin/linux-x64xterm-color 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv 2494171378/.github/workflows tr sh [:lower:] git /usr/bin/git git show�� (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion (http block)
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion ./../.prettieriggit git sv sh ache�� "prettier" --write '**/*.cjs' '*INVALID,NEW infocmp in/sh /ref/tags/v9 git sv sh (http block)
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion --show-toplevel git /usr/bin/git git -c 0514-41391/test-source-field-variant-45292820/.github/workflows diff k --irreversible-dgit %H %ct %D (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo ache/go/1.25.8/x64/bin/git (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo ndor/bin/git (http block)
- Triggering command: /usr/bin/gh gh workflow list --repo owner/repo --json name,path,state cfg **/*.ts **/*.json --ignore-path ache/go/1.25.8/x64/pkg/tool/linuremote.origin.url (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name on' --ignore-path ../../../.prettierignore (http block)
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name ath ../../../.pr**/*.json git de/node/bin/git --show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name ted-objects.md git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� w/js/**/*.json' --ignore-path git /usr/bin/git --show-toplevel git /usr/bin/git git (http block)
https://api.github.com/repos/test/repo
- Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch 3957559137/.github/workflows **/*.cjs $name) { hasDiscussionsEnabled } } **/*.json --ignore-path ../../../.pretti--show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -c 5628-15153/test-1639156229/.github/workflows (http block)
- Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch (http block)
- Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch 2420454491 diff $name) { hasDiscussionsEnabled } } --irreversible-dgit -U0 7550f492ef07791f--show-toplevel git k/gh�� sRemoteWithRealGitcustom_branch793696282/001 sRemoteWithRealGitcustom_branch793696282/002/work k/gh-aw/gh-aw/actions/setup/js/node_modules/.bin/sh --show-toplevel git erignore git (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/8e92dd38-9dd4-419e-b9e7-c1d49bab2d13 Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot

Pull request overview

Centralizes repeated GitHub Actions workflow YAML read/unmarshal logic and promotes previously workflow-local helpers (slice operations and string sanitization) into shared utility packages, while keeping workflow-facing APIs stable.

Changes:

Added a shared readWorkflowYAML(workflowPath string) (map[string]any, error) helper and refactored multiple call sites to use it.
Moved generic slice helpers into pkg/sliceutil (MergeUnique, Exclude) and updated workflow code to use them.
Moved SanitizeName + SanitizeOptions into pkg/stringutil with a compatibility alias/wrapper in pkg/workflow.

Show a summary per file

File	Description
pkg/workflow/yaml.go	Adds `readWorkflowYAML` helper for shared workflow YAML parsing.
pkg/workflow/yaml_read_test.go	Adds unit tests covering `readWorkflowYAML` behavior/contract.
pkg/workflow/dispatch_workflow_validation.go	Refactors dispatch input extraction to use shared YAML reader.
pkg/workflow/call_workflow_validation.go	Refactors workflow_call input extraction to use shared YAML reader.
pkg/workflow/call_workflow_secrets.go	Refactors workflow_call secret extraction to use shared YAML reader.
pkg/workflow/call_workflow_permissions.go	Refactors job-permissions extraction to use shared YAML reader.
pkg/sliceutil/sliceutil.go	Introduces `MergeUnique` and `Exclude` generic helpers.
pkg/sliceutil/sliceutil_test.go	Adds tests for `MergeUnique` and `Exclude`.
pkg/sliceutil/README.md	Documents new public sliceutil APIs.
pkg/workflow/runtime_definitions.go	Replaces local dedup/exclude helpers with `sliceutil` functions.
pkg/workflow/imports.go	Switches merge/dedup logic to `sliceutil.MergeUnique`.
pkg/workflow/safe_outputs_config_generation.go	Switches slice exclusion logic to `sliceutil.Exclude`.
pkg/workflow/compiler_safe_outputs_config.go	Switches slice exclusion logic to `sliceutil.Exclude`.
pkg/stringutil/sanitize.go	Moves `SanitizeName`/`SanitizeOptions` implementation into stringutil.
pkg/stringutil/sanitize_test.go	Adds unit tests for `stringutil.SanitizeName`.
pkg/workflow/strings.go	Preserves workflow API via type alias + delegating wrapper to stringutil.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 16/16 changed files
Comments generated: 1

+// readWorkflowYAML reads and parses a trusted absolute path YAML workflow file.
+// The caller is responsible for repository-boundary validation (for example via
+// findWorkflowFile/isPathWithinDir) before passing workflowPath.
+func readWorkflowYAML(workflowPath string) (map[string]any, error) {
+	cleanPath := filepath.Clean(workflowPath)
+	if !filepath.IsAbs(cleanPath) {
+		return nil, fmt.Errorf("workflow path must be absolute: %s", workflowPath)
+	}
+
+	content, err := os.ReadFile(cleanPath) // #nosec G304 -- Caller provides trusted path, and path is normalized/absolute-checked above


pelikhan · 2026-05-08T05:12:49Z

@copilot review all comments

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/d66cc419-f37b-4903-83f2-7dd13ac70984 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-05-08T05:25:04Z

@copilot review all comments

Reviewed and addressed the actionable review feedback. I updated readWorkflowYAML to resolve relative paths via filepath.Abs (commit 7a91b44) and cleaned up the new relative-path test per follow-up review (commit 5d8760f).

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh gh repo view --json owner,name --jq .owner.login + "/" + .name /usr/bin/sh (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw --format=format:-1 --end-of-optionsxterm-color 1/x64/bin/node /hom�� 3 **/*.cjs /opt/hostedtoolcache/uv/0.11.11/x86_64/sh **/*.json --ignore-path ../../../.pretti--show-toplevel sh (http block)
https://api.github.com/orgs/test-owner/actions/secrets
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name h ../../../.pret.prettierignore (http block)
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name h ../../../.prettierignore git modules/@npmcli/run-script/lib/node-gyp-bin/sh ock.json pkg/wornode git n-dir/node git ules�� w/js/**/*.json' --ignore-path git /usr/bin/git --show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name h ../../../.prettierignore git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� w/js/**/*.json' --ignore-path git /usr/bin/git --show-toplevel git (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel sh /usr/bin/git runs/20260508-05git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel sh /usr/bin/infocmp ithub-script/gitgit 392987/b405/_tesrev-parse bject.type] | @t--show-toplevel infocmp -1 xterm-color /opt/hostedtoolc--jq /usr/bin/git /tmp/go-build273gh -importcfg /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel sh /usr/bin/infocmp runs/20260508-05git infocmp /opt/hostedtoolc--show-toplevel infocmp -1 xterm-color /opt/hostedtoolc--jq /usr/bin/git -bool l /opt/hostedtoolc/repos/actions/github-script/git/ref/tags/v9 git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel l (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 x_amd64/vet sv 80/001 git son git rev-�� --show-toplevel infocmp /usr/bin/git '**/*.ts' '**/*.git infocmp rgo/bin/sh /usr/bin/git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 ^remote\..*\.gh-resolved$ sv 01 gh /usr/bin/gh git rev-�� --show-toplevel gh /usr/bin/git ithub-script/gitgit --jq 1/x64/bin/npm /usr/bin/git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --local core.hooksPath k/node_modules/.bin/sh (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv /tmp/gh-aw-test-runs/20260508-051700-7319/test-2371915309 config (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 infocmp bject.type] | @tsv xterm-color git /usr/bin/git git rev-�� --show-toplevel git /opt/hostedtoolcache/node/24.14.1/x64/bin/node --depth 1 /usr/bin/git node (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv licyMinIntegritynonexistent/repo ../../../**/*.js--json /usr/bin/git --ignore-path ../../../.pretti-1 (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv 'full-sweep (enforce_all)' (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv xterm-color git /usr/bin/git --show-toplevel (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv xterm-color git /usr/bin/git /usr/bin/gh git 392987/b405/cli./repos/actions/github-script/git/ref/tags/v9 git rev-�� --show-toplevel 392987/b405/cli.test /usr/bin/infocmp HEAD .github/workflowrev-parse /usr/bin/git infocmp (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv xterm-color git /usr/bin/git .md md /usr/bin/git git rev-�� --show-toplevel git /usr/bin/infocmp --git-dir git /usr/bin/git infocmp (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv re --log-level=e!../../../pkg/workflow/js/**/*.json (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv re --log-level=error t-again 64/bin/git (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9.0.0
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv js/**/*.json' --ignore-path ../../../.prettierignore (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv t-again (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv REDACTED 1/x64/bin/node /usr/bin/git 9616979/b426/gitgh origin kflow.test git rev-�� --show-toplevel kflow.test /usr/bin/git ry=1 (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git 700961628/.githugh infocmp ache/node/24.14./repos/actions/github-script/git/ref/tags/v9 git rev-�� --show-toplevel node /usr/bin/git FieldEnforcementgit --write /home/REDACTED/wor--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git --noprofile git ache/node/24.14.xterm-color git rev-�� --show-toplevel sh /usr/bin/git bility_SameInputgit gh 4394557/b421/vet--show-toplevel git (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv xterm-color 9616979/b412/console.test /usr/bin/git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel l /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git /tmp/compile-allinfocmp config /usr/bin/git git (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv 85849293/001 ../../../**/*.json ache/node/24.14.1/x64/bin/node --ignore-path ../../../.prettiapi (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv run --auto /usr/bin/git --detach (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /tmp/gh-aw-test-runs/20260508-051700-7319/test-2474609220 config /usr/bin/git remote.origin.urgit (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv s/test.md (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /usr/bin/git git /usr/bin/git --show-toplevel git tions/setup/js/n--show-toplevel git rev-�� --show-toplevel git cfg ithub-script/gitgit git de_modules/.bin/--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git .cfg phen344924525/00git phen344924525/00rev-parse bject.type] | @t--show-toplevel git (http block)
https://api.github.com/repos/aws-actions/configure-aws-credentials/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel node /usr/bin/git /home/REDACTED/worgit (http block)
- Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel (http block)
- Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git ons-test33900779git config clusion,workflow--show-toplevel git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/gh git (http block)
https://api.github.com/repos/azure/login/git/ref/tags/v2
- Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/gh-aw-test-git l /usr/bin/gh git rev-�� --show-toplevel gh /usr/bin/git /repos/actions/ginfocmp --jq /usr/bin/gh git (http block)
- Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel gh /usr/bin/git /repos/actions/ggh --jq /usr/bin/git git rev-�� --show-toplevel git /usr/bin/gh /tmp/gh-aw-test-infocmp remote /usr/bin/git gh (http block)
- Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel node /usr/bin/git /home/REDACTED/worgit l clusion,workflow--show-toplevel git rev-�� --show-toplevel /opt/hostedtoolcache/node/24.14.1/x64/bin/node /usr/bin/git steps.test.outpuinfocmp git me: String!) { xterm-color git (http block)
https://api.github.com/repos/docker/login-action/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/gh-aw-test-git config /usr/bin/git git rev-�� /ref/tags/v9 git sv /tmp/gh-aw-test-infocmp rev-parse /usr/bin/git gh (http block)
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel node /usr/bin/git /home/REDACTED/worgit git /opt/hostedtoolc--show-toplevel git rev-�� /ref/tags/v9 /opt/hostedtoolcache/node/24.14.1/x64/bin/node sv /ref/tags/v9 git sv git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git Onlyrepos_only_wgh (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/gh CommaSeparatedCogh ../../../**/*.jsapi /snap/bin/sh gh api /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git 1920-19891/test-infocmp git ache/node/24.14.xterm-color git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/gh CompiledOutput23gh tr ache/node/24.14./repos/actions/github-script/git/ref/tags/v9 gh api /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git sistency_GoAndJainfocmp git /opt/hostedtoolcxterm-color git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv --get-regexp ^remote\..*\.gh-resolved$ om/other/repo.git json' --ignore-pgit (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/bin/gofmt (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv bject.type] | @tsv git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 git sv json' --ignore-pgit git 64/bin/node git rev-�� /ref/tags/v9 gh sv ty-test.md --jq es/.bin/node git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 git sv json' --ignore-pgit git /usr/bin/git git -C /ref/tags/v9 config sv remote.origin.urgit to absolute befrev-parse /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-05-01 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-04-08 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-02-07 (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name (http block)
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name git 64/pkg/tool/linux_amd64/compile --show-toplevel infocmp /usr/bin/gh 64/pkg/tool/linux_amd64/compile k/gh�� _.a on k/node_modules/.bin/node /../../.prettiergit erignore /usr/bin/git sh (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name origin 1/x64/bin/node (http block)
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 HEAD k/gh-aw/gh-aw/actions/node_modules/.bin/node .js (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name infocmp k/gh-aw/gh-aw/actions/setup/js/node_modules/.bin/node xterm-color infocmp (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1234567890
- Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, (http block)
- Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, h ../../../.pret.prettierignore gh /usr/bin/git /repos/actions/g/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/link --jq (http block)
- Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, h ../../../.pret.prettierignore git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� /ref/tags/v9 git sv ithub-script/gitgit git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name origin bin/sh (http block)
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 HEAD k/node_modules/.bin/node s-in-body.md (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name e/git 1/x64/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin/node /repos/actions/ggit --jq /usr/bin/git gh tion�� /repos/actions/github-script/gitremote.origin.url on son ignore erignore bject.type] | @t--show-toplevel /bin/sh (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name (http block)
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name git 64/pkg/tool/linux_amd64/compile --show-toplevel infocmp /usr/bin/infocmplist 64/pkg/tool/linu--json k/gh�� rity3218084126/0--limit on k/gh-aw/gh-aw/no--created /../../.prettiergit w sv sh (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name (http block)
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name zation_test.go 64/pkg/tool/linux_amd64/vet /ref/tags/v9 /usr/bin/gh sv 64/pkg/tool/linux_amd64/vet k/gh�� rity3218084126/001 on k/gh-aw/node_modules/.bin/node /../../.prettiergit erignore /usr/bin/git sh (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name (http block)
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name git 64/pkg/tool/linux_amd64/compile --show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name (http block)
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name git 64/pkg/tool/linux_amd64/vet r gh sv 64/pkg/tool/linu--json k/gh�� /repos/actions/g--limit on es/.bin/node /../../.prettiergit erignore /usr/bin/git sh (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path h ../../../.prettierignore (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 (http block)
https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md
- Triggering command: /tmp/go-build2909616979/b405/cli.test /tmp/go-build2909616979/b405/cli.test -test.testlogfile=/tmp/go-build2909616979/b405/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true (http block)
- Triggering command: /tmp/go-build273392987/b405/cli.test /tmp/go-build273392987/b405/cli.test -test.testlogfile=/tmp/go-build273392987/b405/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true --show-toplevel git /usr/bin/git infocmp -1 xterm-color git /usr/bin/git ithub-script/gitsh infocmp bject.type] | @tnpx prettier --write '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' --ignore-path git (http block)
- Triggering command: /tmp/go-build1034394557/b405/cli.test /tmp/go-build1034394557/b405/cli.test -test.testlogfile=/tmp/go-build1034394557/b405/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true /repos/actions/gsh d13ac70984 /usr/bin/git infocmp -1 xterm-color git /usr/bin/gh --show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --get remote.origin.ur-k /usr/bin/git git rev-�� --show-toplevel git /usr/bin/gh runs/20260508-05git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git user.email test@example.com-k mple.com/org/rep/tmp/gh-aw/aw-feature-branch.patch git rev-�� --show-toplevel /usr/bin/git /usr/bin/git --get-regexp ^remote\..*\.gh-rev-parse /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git user.name Test User 64/pkg/tool/linu/tmp/gh-aw/aw-feature-branch.patch git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/link /usr/bin/gh kflow.test infocmp ortcfg.link gh (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv json' --ignore-path ../../../.pr**/*.json (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv rite '**/*.cjs' '**/*.ts' '**/*.json' --ignore-p--detach -trimpath 1/x64/bin/node -p github.com/githuremote -lang=go1.25 npx -has�� SameOutput4228830165/001/stability-test.md scripts/**/*.js es/.bin/node .prettierignore --log-level=erro-C -importcfg sh (http block)
- Triggering command: `/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @TSV rite '/*.cjs' '/.ts' '**/.json' --ignore-path ../../../.pr**/.json --jq p/bin/sh ithub-script/git/usr/bin/git git ode-gyp-bin/sh git comm�� te 'scripts/**/.js' --ignore-path .prettierignore --log-level=error fix: resolve workflow yaml paths to absolute before reading

Agent-Logs-Url: htt-U0 k/gh-aw/gh-aw/node_modules/.bin/node /ref/tags/v9 git sv git` (http block)

https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3

Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv on' --ignore-path ../../../.prettierignore (http block)

Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv xterm-color rty sh --show-toplevel git (http block)

Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv --show-toplevel git x86_64/git ithub-script/gitgit /usr/bin/git bject.type] | @t--show-toplevel git rev-�� th .prettierignore --log-level=e!../../../pkg/workflow/js/**/*.json infocmp /usr/bin/git ithub-script/git/opt/hostedtoolcache/node/24.14.1/x64/bin/node git ache/node/24.14.github.repository git (http block)

https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0

Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv on' --ignore-path ../../../.prettierignore (http block)

Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv ty-test.md (http block)

Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv --show-toplevel git bin/node --show-toplevel git /usr/bin/git f1aef33e tion�� th .prettierignore --log-level=e!../../../pkg/workflow/js/**/*.json git ode_modules/.bin/node --show-toplevel git /usr/bin/infocmp/home/REDACTED/work/gh-aw/gh-aw/.github/workflows/architecture-guardian.md git (http block)

https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0

Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv on' --ignore-pat--exclude-hidden=receive (http block)

Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv y-frontmatter.md git f1aef33e:go.mod --show-toplevel git /usr/bin/git git tion�� th .prettierignore --log-level=e!../../../pkg/workflow/js/**/*.json git es/.bin/node --show-toplevel gh /usr/bin/infocmp--show-toplevel git (http block)

Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv iant-2735575127/.github/workflows git /usr/bin/git /ref/tags/v9 gh sv git rev-�� th .prettierignore --log-level=error gh node /repos/actions/ggit --jq ache/node/24.14./tmp/gh-aw-test-runs/20260508-052132-32450/test-2842048094 git (http block)

https://api.github.com/repos/google-github-actions/auth/git/ref/tags/v2

Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel /tmp/gh-aw-merge-1379417737/new.md /usr/bin/git /repos/actions/ggit l (http block)

Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/gh-aw-test-git rev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git thImports2736360git remote /usr/bin/infocmp--show-toplevel git (http block)

Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel gh /usr/bin/git git rev-�� --show-toplevel git /usr/bin/infocmp --get remote.origin.urrev-parse om/org2/repo2.gi--show-toplevel infocmp (http block)

https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999

Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv ant-322872203 (http block)

Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv vaScript1329488292/001/test-empty-frontmatter.md -trimpath 1/x64/bin/node -p main -lang=go1.25 node t-ha�� SameOutput4228830165/001/stability-test.md --write 1/x64/bin/node --ignore-path .prettierignore --log-level=erroxterm-color sh (http block)

Triggering command: `/usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @TSV rite '/*.cjs' '/.ts' '**/.json' --ignore-path ../../../.pr**/*.json git 1/x64/bin/node --show-toplevel git /usr/bin/git git t-ha�� orts3150161066/001/main.md fix: resolve workflow yaml paths to absolute before reading

Agent-Logs-Url: htt-U0 1/x64/bin/node --show-toplevel git /usr/bin/git git` (http block)

https://api.github.com/repos/nonexistent/repo/actions/runs/12345

Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion /../../.prettiergit erignore (http block)

Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion rkflow/js/**/*.jgit git erignore bash (http block)

Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion elete github/gh-aw/sesconfig 00911d502d75d96fuser.name infocmp -1 306660476 git k/_temp/uv-python-dir/node --show-toplevel %H %ct %D (http block)

https://api.github.com/repos/owner/repo/actions/workflows

Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo (http block)

Triggering command: /usr/bin/gh gh workflow list --repo owner/repo --json name,path,state /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet rror (http block)

Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� w/js/**/*.json' --ignore-path git sv ithub-script/gitgit git bject.type] | @t/tmp/gh-aw-test-runs/20260508-051920-19891/test-add-source-path-4148694156 git (http block)

https://api.github.com/repos/test-owner/test-repo/actions/secrets

Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name h ../../../.pret.prettierignore (http block)

Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name h ../../../.prettierignore --jq /usr/bin/git ithub-script/gitnode git 1/x64/bin/node git ules�� w/js/**/*.json' --ignore-path git /usr/bin/git ithub-script/gitgit git bject.type] | @tsv git (http block)

Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name h ../../../.prettierignore git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� w/js/**/*.json' --ignore-path git /usr/bin/git --show-toplevel git (http block)

https://api.github.com/repos/test/repo

Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch -aw/git/ref/tags/v3.0.0 --stdin Name,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --exclude-hiddengit --all --quiet git -C /tmp/TestGuardPolicyMinIntegrityOnlymin-integrity_with_repos=public_950167513/001 rev-parse /opt/hostedtoolcache/node/24.14.1/x64/bin/node w/js/**/*.json' git (http block)

Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch aw/actions-lock.json ]; then \ cp .github/aw/actions-lock.json pkg/actionpins/data/action_pins.gh infocmp $name) { hasDiscussionsEnabled } } ./../.prettieriggit git (http block)

Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch e=false --jq $name) { hasDiscussionsEnabled } } ithub-script/gitgit git (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled

Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

…g-yet-again

Initial plan

76da80e

Copilot AI assigned Copilot and gh-aw-bot May 8, 2026

Copilot started work on behalf of gh-aw-bot May 8, 2026 03:51 View session

Copilot AI linked an issue May 8, 2026 that may be closed by this pull request

[refactor] Semantic function clustering analysis — 4 refactoring opportunities #30911

Closed

5 tasks

Copilot AI and others added 2 commits May 8, 2026 04:03

refactor: centralize workflow yaml parsing and shared helpers

82dfb11

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/8e92dd38-9dd4-419e-b9e7-c1d49bab2d13 Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

docs: clarify trusted path contract in workflow yaml reader

541475a

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/8e92dd38-9dd4-419e-b9e7-c1d49bab2d13 Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Refactor semantic function clustering analysis with actionable insights~~ Refactor duplicated workflow YAML parsing and promote shared slice/sanitization utilities May 8, 2026

Copilot finished work on behalf of gh-aw-bot May 8, 2026 04:08

Copilot AI requested a review from gh-aw-bot May 8, 2026 04:08

pelikhan marked this pull request as ready for review May 8, 2026 04:58

Copilot AI review requested due to automatic review settings May 8, 2026 04:58

Copilot started reviewing on behalf of pelikhan May 8, 2026 04:59 View session

Copilot AI reviewed May 8, 2026

View reviewed changes

Copilot started work on behalf of pelikhan May 8, 2026 05:12 View session

Copilot AI and others added 3 commits May 8, 2026 05:20

fix: resolve workflow yaml paths to absolute before reading

7a91b44

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/d66cc419-f37b-4903-83f2-7dd13ac70984 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

test: guard yaml helper cwd cleanup when chdir fails

4da3ef3

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/d66cc419-f37b-4903-83f2-7dd13ac70984 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

test: simplify yaml helper relative path cleanup

5d8760f

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/d66cc419-f37b-4903-83f2-7dd13ac70984 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan May 8, 2026 05:26

Copilot AI requested a review from pelikhan May 8, 2026 05:26

Merge branch 'main' into copilot/refactor-semantic-function-clusterin…

38e2cd5

…g-yet-again

pelikhan merged commit b5ad3e1 into main May 8, 2026
26 checks passed

pelikhan deleted the copilot/refactor-semantic-function-clustering-yet-again branch May 8, 2026 06:03

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Refactor duplicated workflow YAML parsing and promote shared slice/sanitization utilities#30926

Refactor duplicated workflow YAML parsing and promote shared slice/sanitization utilities#30926
pelikhan merged 7 commits intomainfrom
copilot/refactor-semantic-function-clustering-yet-again

Copilot AI commented May 8, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

pelikhan commented May 8, 2026

Uh oh!

Copilot AI commented May 8, 2026 •

edited

Loading

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

Copilot AI commented May 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

pelikhan commented May 8, 2026

Uh oh!

Copilot AI commented May 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Copilot AI commented May 8, 2026 •

edited

Loading

Copilot AI commented May 8, 2026 •

edited

Loading