fix(audit): decouple error visibility from verbose flag in AuditWorkflowRun by Copilot · Pull Request #30939 · github/gh-aw

Copilot · 2026-05-08T05:13:53Z

AuditWorkflowRun silently discarded errors from 13 analysis sub-steps when verbose=false (the default), producing audit reports that appeared complete but were missing data with no indication of failure.

Changes

pkg/cli/audit.go: Replace all if err != nil && verbose guards with unconditional auditLog.Printf logging, keeping the human-readable stderr warning behind if verbose. Affects: fetchJobDetails, extractMissingToolsFromRun, extractMissingDataFromRun, extractNoopsFromRun, extractMCPFailuresFromRun, analyzeAccessLogs, analyzeFirewallLogs, analyzeFirewallPolicy, extractMCPToolUsageData, analyzeTokenUsage, analyzeRedactedDomains, analyzeGitHubRateLimits, listArtifacts.

// Before — error silently dropped in non-verbose mode
jobDetails, err := fetchJobDetails(run.DatabaseID, verbose)
if err != nil && verbose {
    fmt.Fprintln(os.Stderr, console.FormatWarningMessage(...))
}

// After — always captured; stderr output stays verbose-gated
jobDetails, err := fetchJobDetails(run.DatabaseID, verbose)
if err != nil {
    auditLog.Printf("fetchJobDetails failed: %v", err)
    if verbose {
        fmt.Fprintln(os.Stderr, console.FormatWarningMessage(...))
    }
}

Errors are now visible via DEBUG=cli:audit in all modes.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh gh repo view --json owner,name --jq .owner.login + "/" + .name ache/uv/0.11.11/x86_64/node (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw util_test modules/@npmcli/--show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linuremote -ato�� ZgI7msjwO -buildtags h -errorsas -ifaceassert -nilfunc rtcfg (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
https://api.github.com/orgs/test-owner/actions/secrets
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name --get-regexp --local 296c449293c747d5-d (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/compile /usr/bin/infocmp (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 ache/go/1.25.8/xrev-parse sv '**/*.ts' '**/*.gh 497510/b034/vet.api x86_64/node git remo�� add origin /usr/bin/git LsRemoteWithRealgit LsRemoteWithRealrev-parse 64/pkg/tool/linu--show-toplevel /usr/bin/git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv ry=1 -dwarf=false cfg go1.25.8 -c=4 -nolocalimports sh -c npx prettier --write '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' --ignore-path /tmp/go-build460497510/b001/_testmain.go /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 git bject.type] | @tsv --show-toplevel ache/go/1.25.8/xrev-parse /usr/bin/git git rev-�� --show-toplevel git /opt/hostedtoolcache/node/24.14.1/x64/bin/node --show-toplevel 64/pkg/tool/linurev-parse /usr/bin/gh node (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/vet /usr/bin/git w/js/**/*.json' git --local 64/pkg/tool/linu--show-toplevel git rev-�� s/test.md 64/pkg/tool/linu-buildtags /usr/bin/git template-expressgit cfg 64/pkg/tool/linu--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv waysRecompiles248170094/001 rev-parse /usr/bin/git json' --ignore-pgit cfg 64/pkg/tool/linu--show-toplevel git conf�� user.name Test User /usr/bin/git FETCH_HEAD cfg x_amd64/asm git (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv xterm-color node /usr/bin/git /home/REDACTED/worgh 64/pkg/tool/linuapi /usr/bin/git git rev-�� --show-toplevel git /usr/bin/infocmp (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv 8956+gh-aw-bot@users.noreply.github.com> ame modules/@npmcli/run-script/lib/node-gyp-bin/node (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv tions-lock.json pkg/actionpins/data/action_pins.json; \ cp .github/aw/actions-lock.json pkg/wornode (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9.0.0
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv go1.25.8 -c=4 -nolocalimports -importcfg /tmp/go-build865290052/b070/importcfg -pack /tmp/go-build865290052/b070/_testmain.go /pre�� --get-regexp --local x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv ath ../../../.pr**/*.json (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git _.a --write e/git-upload-pac/repos/actions/github-script/git/ref/tags/v9 git rev-�� --show-toplevel sh /usr/bin/git I6xSOsFRU (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linux_amd64/compile /usr/bin/infocmp _.a --write 290052/b404/vet.xterm-color infocmp -1 xterm-color node /usr/bin/git /v3.0.0 format:pkg-json sv git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/link /usr/bin/git /tmp/go-build865git -importcfg /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --get (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv 290052/b465/tty.test -tests ache/node/24.14.1/x64/bin/node (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /tmp/TestGuardPolicyMinIntegrityOnlymin-integrity_only_defaults_repo501822104/001 config /opt/hostedtoolcache/node/24.14.1/x64/bin/node remote.origin.urgit --local 64/pkg/tool/linu--show-toplevel node /tmp�� /tmp/TestHashStability_SameInputSameOutput4289915670/001/stability-test.md 9p1ljm9K4LOO /usr/bin/git --local cfg 64/pkg/tool/linu--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 rev-parse sv --local cfg 64/pkg/tool/linu--show-toplevel git remo�� add origin /usr/bin/git ting JSON files.git cfg x_amd64/vet git (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv user.name Test User /opt/hostedtoolcache/node/24.14.1/x64/bin/node XtR4/IO3Gft_q7-Tgit HEAD 64/pkg/tool/linu--show-toplevel /opt/hostedtoolcache/node/24.14.1/x64/bin/node /tmp�� github.event.inputs.branch 64/pkg/tool/linurev-parse /opt/hostedtoolcache/node/24.14.1/x64/bin/node ../pkg/workflow/git (http block)
https://api.github.com/repos/aws-actions/configure-aws-credentials/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git k/gh-aw/gh-aw/pkgit remote clusion,workflow--show-toplevel git rev-�� --show-toplevel git /usr/bin/git /tmp/gh-aw-test-gh config /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel x_amd64/vet /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git /tmp/gh-aw-test-git remote /usr/bin/git git (http block)
https://api.github.com/repos/azure/login/git/ref/tags/v2
- Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/node/24.14.1/x64/bin/node /usr/bin/git /tmp/compile-insgit show /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/compile /usr/bin/git (http block)
https://api.github.com/repos/docker/login-action/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/compile-insgit config /opt/hostedtoolc--show-toplevel git rev-�� /ref/tags/v9 /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/compile sv /tmp/go-build865infocmp -trimpath /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/gh SameOutput428991gh -tests e/git gh api /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git mplied --ignore-path /opt/hostedtoolcxterm-color git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv user.email (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 remote.origin.url sv 413370789/001 413370789/002/worev-parse ode_modules/.bin--show-toplevel git add /ref/tags/v9 64/pkg/tool/linu-importcfg sv -frontmatter.md flow-ci-test-678rev-parse cfg git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-05-01 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-04-08 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-02-07 (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name 497510/b370/vet.cfg util.test (http block)
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 l k/gh-aw/gh-aw/actions/setup/js/n-nolocalimports nore (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name ../../../**/*.json son ignore ../../../.pretticonfig (http block)
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 497510/b364/vet.cfg son ignore (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1234567890
- Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, js/**/*.json' --ignore-path ../../../.prettierignore (http block)
- Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, --local --get x_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name ../../../**/*.json til.test ignore ../../../.prettiremote (http block)
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 497510/b361/vet.cfg son ignore ../../../.prettirun (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name 497510/b369/vet.cfg 64/pkg/tool/linux_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name til_test.go 64/pkg/tool/linux_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 /tmp/go-build460497510/b009/vet.-c=4 es/.bin/sh nore (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name (http block)
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name (http block)
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 -trimpath rtcfg.link nore github.com/stretrev-parse -lang=go1.17 kcN4PIguFYaXajtsxp/L4kSk4A-qJNj-/home/REDACTED/work/gh-aw/gh-aw/pkg/stats/spec_test.go -uns�� te '**/*.cjs' '**/*.ts' '**/*.json' --ignore-path ../../../.prettierignore /tmp/go-build460497510/b105/vet.cfg _.a -c=4 -nolocalimports -importcfg /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path go1.25.8 -c=4 -nolocalimports -importcfg /tmp/go-build865290052/b433/importcfg -pack /tmp/go-build865290052/b433/_testmain.go conf�� js/**/*.json' --ignore-path ../../../.prettierignore --local 64/pkg/tool/linux_amd64/vet gpg.program (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 ../../../.prettiremote msg x_amd64/compile -uns�� util.test /tmp/go-build460497510/b004/vet.cfg rtcfg.link (http block)
https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md
- Triggering command: /tmp/go-build865290052/b405/cli.test /tmp/go-build865290052/b405/cli.test -test.testlogfile=/tmp/go-build865290052/b405/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel -tests om/owner/repo.gi/tmp/gh-aw/aw-feature-branch.patch git rev-�� --show-toplevel git /usr/bin/gh --show-toplevel oD8vbM8RqoN1 /usr/bin/gh gh (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv te 'scripts/**/*.js' --ignore-path .prettierignore --log-level=error -buildtags util.test -errorsas -ifaceassert -nilfunc util.test 6529�� api-consumption---workflow on 64/pkg/tool/linu--limit /../../.prettier/usr/bin/gh erignore -nilfunc 64/pkg/tool/linu-f (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv on' --ignore-path ../../../.pret.prettierignore cfg es/.bin/node (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv on' --ignore-path ../../../.prettierignore core.hooksPath 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv set-url cfg 902f732cd68f84f4296c449293c747d5-d (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv set-url origin 64/pkg/tool/linux_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv -c=4 -nolocalimports -importcfg /tmp/go-build865290052/b467/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/tty/spec_test.go 64/pkg/tool/linux_amd64/vet ls-f�� ub/workflows --others x_amd64/vet (http block)
https://api.github.com/repos/google-github-actions/auth/git/ref/tags/v2
- Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel node /usr/bin/git /tmp/TestHashCongit x_amd64/vet /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel node /usr/bin/infocmp thImports2767663git 64/pkg/tool/linurev-parse /usr/bin/git infocmp (http block)
https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv efaultBranchFromLsRemoteWithRealgo1.25.8 efaultBranchFromLsRemoteWithReal-c=4 es/.bin/node -errorsas -ifaceassert -nilfunc /opt/hostedtoolcache/go/1.25.8/xTest User k/gh�� /ref/tags/v9 on 64/pkg/tool/linux_amd64/link /../../.prettiergit erignore -nilfunc 64/pkg/tool/linux_amd64/link (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo modules/@npmcli/run-script/lib/node-gyp-bin/sh (http block)
- Triggering command: /usr/bin/gh gh workflow list --repo owner/repo --json name,path,state k/gh-aw/gh-aw/actions/node_modul-lang=go1.25 (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name --get-regexp --local /sh (http block)
https://api.github.com/repos/test/repo
- Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch /001/noflag-a.md -buildtags $name) { hasDiscussionsEnabled } } -errorsas -ifaceassert erignore /opt/hostedtoolcache/go/1.25.8/xshow -ato�� 2011-14531/test-745772357/.github/workflows -buildtags ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -errorsas -ifaceassert -nilfunc ache/go/1.25.8/xsh (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/2a09ee32-4ac6-48cc-b135-08009b7946f6 Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

…rbose flag Agent-Logs-Url: https://github.com/github/gh-aw/sessions/2a09ee32-4ac6-48cc-b135-08009b7946f6 Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

pelikhan · 2026-05-08T05:55:28Z

@copilot merge main and recompile

…ent-errors # Conflicts: # .github/workflows/daily-cache-strategy-analyzer.lock.yml # .github/workflows/daily-fact.lock.yml # .github/workflows/daily-observability-report.lock.yml # .github/workflows/duplicate-code-detector.lock.yml # .github/workflows/grumpy-reviewer.lock.yml # .github/workflows/issue-arborist.lock.yml # .github/workflows/schema-feature-coverage.lock.yml # .github/workflows/smoke-call-workflow.lock.yml # .github/workflows/smoke-codex.lock.yml Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot

Pull request overview

Adjusts audit error reporting so failures from AuditWorkflowRun sub-steps are not silently suppressed in non-verbose mode, by routing them to the cli:audit debug logger while keeping user-facing warnings gated by --verbose.

Changes:

Log sub-step errors via auditLog.Printf(...) unconditionally (visible with DEBUG=cli:audit), while preserving verbose-only stderr warnings.
Update embedded awf-config.json model mappings across multiple workflow .lock.yml files (adds gemini/... model patterns alongside existing google/... / openai/... entries).

Show a summary per file

File	Description
pkg/cli/audit.go	Always records sub-step failures to the `cli:audit` debug logger; keeps stderr warnings behind `--verbose`.
.github/workflows/video-analyzer.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/test-workflow.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/test-project-url-default.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/test-dispatcher.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/super-linter.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/smoke-opencode.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/smoke-gemini.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/smoke-crush.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/smoke-ci.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/security-review.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/repo-tree-map.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/pr-nitpick-reviewer.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/pr-code-quality-reviewer.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/poem-bot.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/pdf-summary.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/notion-issue-summary.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/jsweep.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/issue-triage-agent.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/gpclean.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/github-remote-mcp-auth-test.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/example-permissions-warning.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/dev.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/dependabot-burner.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/daily-team-status.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/daily-skill-optimizer.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/daily-semgrep-scan.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/daily-regulatory.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/daily-malicious-code-scan.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/daily-cli-tools-tester.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/daily-architecture-diagram.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/copilot-token-audit.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/codex-github-remote-mcp-test.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/code-simplifier.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/brave.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/bot-detection.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).
.github/workflows/ace-editor.lock.yml	Updates embedded awf-config model pattern allowlist (adds `gemini/...` patterns).

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 124/218 changed files
Comments generated: 2

+	if err != nil {
+		auditLog.Printf("fetchJobDetails failed: %v", err)
+		if verbose {


@@ -632,7 +632,7 @@ jobs:
          GH_AW_NODE_BIN=$(command -v node 2>/dev/null || true)
          export GH_AW_NODE_BIN
          (umask 177 && touch /tmp/gh-aw/agent-stdio.log)
-          printf '%s\n' '{"$schema":"https://github.com/github/gh-aw-firewall/releases/download/v0.25.41/awf-config.schema.json","network":{"allowDomains":["api.business.githubcopilot.com","api.enterprise.githubcopilot.com","api.github.com","api.githubcopilot.com","api.individual.githubcopilot.com","api.snapcraft.io","archive.ubuntu.com","azure.archive.ubuntu.com","crl.geotrust.com","crl.globalsign.com","crl.identrust.com","crl.sectigo.com","crl.thawte.com","crl.usertrust.com","crl.verisign.com","crl3.digicert.com","crl4.digicert.com","crls.ssl.com","github.com","host.docker.internal","json-schema.org","json.schemastore.org","keyserver.ubuntu.com","ocsp.digicert.com","ocsp.geotrust.com","ocsp.globalsign.com","ocsp.identrust.com","ocsp.sectigo.com","ocsp.ssl.com","ocsp.thawte.com","ocsp.usertrust.com","ocsp.verisign.com","packagecloud.io","packages.cloud.google.com","packages.microsoft.com","ppa.launchpad.net","raw.githubusercontent.com","registry.npmjs.org","s.symcb.com","s.symcd.com","security.ubuntu.com","telemetry.enterprise.githubcopilot.com","ts-crl.ws.symantec.com","ts-ocsp.ws.symantec.com","www.googleapis.com"]},"apiProxy":{"enabled":true,"models":{"auto":["large"],"deep-research":["copilot/deep-research*","copilot/o3-deep-research*","copilot/o4-mini-deep-research*","google/deep-research*","openai/o3-deep-research*","openai/o4-mini-deep-research*"],"gemini-flash":["copilot/gemini-*flash*","google/gemini-*flash*"],"gemini-pro":["copilot/gemini-*pro*","google/gemini-*pro*"],"gpt-4.1":["copilot/gpt-4.1*","openai/gpt-4.1*"],"gpt-5":["copilot/gpt-5*","openai/gpt-5*"],"gpt-5-codex":["copilot/gpt-5*codex*","openai/gpt-5*codex*"],"gpt-5-mini":["copilot/gpt-5*mini*","openai/gpt-5*mini*"],"gpt-5-nano":["copilot/gpt-5*nano*","openai/gpt-5*nano*"],"gpt-5-pro":["copilot/gpt-5*pro*","openai/gpt-5*pro*"],"haiku":["copilot/*haiku*","anthropic/*haiku*"],"large":["sonnet","gpt-5-pro","gpt-5","gemini-pro"],"mini":["haiku","gpt-5-mini","gpt-5-nano","gemini-flash"],"opus":["copilot/*opus*","anthropic/*opus*"],"reasoning":["copilot/o1*","copilot/o3*","copilot/o4*","openai/o1*","openai/o3*","openai/o4*"],"small":["mini"],"sonnet":["copilot/*sonnet*","anthropic/*sonnet*"]}},"container":{"imageTag":"0.25.41,squid=sha256:1260445d25968dbf3ae70143964177a0e5914cf2ce07a6117f7d3caec6c3e3c4,agent=sha256:cb2b565d070116d4b67e355775340528b5a2c3cb18b2c9049638bcc2df681770,api-proxy=sha256:fadd0de387209f69a9a7a1b8722bb5e7fdfb80ba9749a5c60f0e4cd7582a74d0,cli-proxy=sha256:62171f2fa508667b8b0a9e096f826983f312e3da0ce894f80c0f83a875af60fe"}}' > "${RUNNER_TEMP}/gh-aw/awf-config.json" && cp "${RUNNER_TEMP}/gh-aw/awf-config.json" /tmp/gh-aw/awf-config.json
+          printf '%s\n' '{"$schema":"https://github.com/github/gh-aw-firewall/releases/download/v0.25.41/awf-config.schema.json","network":{"allowDomains":["api.business.githubcopilot.com","api.enterprise.githubcopilot.com","api.github.com","api.githubcopilot.com","api.individual.githubcopilot.com","api.snapcraft.io","archive.ubuntu.com","azure.archive.ubuntu.com","crl.geotrust.com","crl.globalsign.com","crl.identrust.com","crl.sectigo.com","crl.thawte.com","crl.usertrust.com","crl.verisign.com","crl3.digicert.com","crl4.digicert.com","crls.ssl.com","github.com","host.docker.internal","json-schema.org","json.schemastore.org","keyserver.ubuntu.com","ocsp.digicert.com","ocsp.geotrust.com","ocsp.globalsign.com","ocsp.identrust.com","ocsp.sectigo.com","ocsp.ssl.com","ocsp.thawte.com","ocsp.usertrust.com","ocsp.verisign.com","packagecloud.io","packages.cloud.google.com","packages.microsoft.com","ppa.launchpad.net","raw.githubusercontent.com","registry.npmjs.org","s.symcb.com","s.symcd.com","security.ubuntu.com","telemetry.enterprise.githubcopilot.com","ts-crl.ws.symantec.com","ts-ocsp.ws.symantec.com","www.googleapis.com"]},"apiProxy":{"enabled":true,"models":{"auto":["large"],"deep-research":["copilot/deep-research*","copilot/o3-deep-research*","copilot/o4-mini-deep-research*","google/deep-research*","gemini/deep-research*","openai/o3-deep-research*","openai/o4-mini-deep-research*"],"gemini-flash":["copilot/gemini-*flash*","google/gemini-*flash*","gemini/gemini-*flash*"],"gemini-pro":["copilot/gemini-*pro*","google/gemini-*pro*","gemini/gemini-*pro*"],"gpt-4.1":["copilot/gpt-4.1*","openai/gpt-4.1*"],"gpt-5":["copilot/gpt-5*","openai/gpt-5*"],"gpt-5-codex":["copilot/gpt-5*codex*","openai/gpt-5*codex*"],"gpt-5-mini":["copilot/gpt-5*mini*","openai/gpt-5*mini*"],"gpt-5-nano":["copilot/gpt-5*nano*","openai/gpt-5*nano*"],"gpt-5-pro":["copilot/gpt-5*pro*","openai/gpt-5*pro*"],"haiku":["copilot/*haiku*","anthropic/*haiku*"],"large":["sonnet","gpt-5-pro","gpt-5","gemini-pro"],"mini":["haiku","gpt-5-mini","gpt-5-nano","gemini-flash"],"opus":["copilot/*opus*","anthropic/*opus*"],"reasoning":["copilot/o1*","copilot/o3*","copilot/o4*","openai/o1*","openai/o3*","openai/o4*"],"small":["mini"],"sonnet":["copilot/*sonnet*","anthropic/*sonnet*"]}},"container":{"imageTag":"0.25.41,squid=sha256:1260445d25968dbf3ae70143964177a0e5914cf2ce07a6117f7d3caec6c3e3c4,agent=sha256:cb2b565d070116d4b67e355775340528b5a2c3cb18b2c9049638bcc2df681770,api-proxy=sha256:fadd0de387209f69a9a7a1b8722bb5e7fdfb80ba9749a5c60f0e4cd7582a74d0,cli-proxy=sha256:62171f2fa508667b8b0a9e096f826983f312e3da0ce894f80c0f83a875af60fe"}}' > "${RUNNER_TEMP}/gh-aw/awf-config.json" && cp "${RUNNER_TEMP}/gh-aw/awf-config.json" /tmp/gh-aw/awf-config.json


Copilot · 2026-05-08T06:01:36Z

@copilot merge main and recompile

Done — merged main (resolving 9 lock.yml conflicts) and recompiled all 217 workflows in commit 366e6f8.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh gh repo view --json owner,name --jq .owner.login + "/" + .name /usr/bin/git remote.origin.urgit (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw owner=github -f 64/pkg/tool/linux_amd64/vet api rite '**/*.cjs' '**/*.ts' '**/*.json' --ignore-path ../../../.pr**/*.json --jq 1/x64/bin/node (http block)
https://api.github.com/orgs/test-owner/actions/secrets
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name h ../../../.prettierignore committer.name 6925fefd2ab0065d-d (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel sh /usr/bin/infocmp runs/20260508-06git git /opt/hostedtoolc--show-toplevel infocmp -1 xterm-color /opt/hostedtoolc--jq /usr/bin/git -bool -buildtags /bin/sh git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 l sv ithub/workflows -f 1/x64/lib/node_m/repos/actions/github-script/git/ref/tags/v9 git remo�� -f infocmp /usr/bin/git hub/workflows (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv t0 rev-parse (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel /usr/lib/git-cor--jq (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 git bject.type] | @tsv --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /opt/hostedtoolcache/node/24.14.1/x64/bin/node --show-toplevel ache/go/1.25.8/xrev-parse /usr/bin/gh node (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv -test.paniconexit0 -test.v=true /usr/lib/git-core/git -test.timeout=10git -test.run=^Test -test.short=true--show-toplevel /usr/lib/git-core/git main�� run --auto /usr/bin/git --detach credential.helperev-parse modules/@npmcli/--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv --get remote.origin.url /usr/bin/git h ../../../.pretgit committer.email /home/REDACTED/.lo--show-toplevel git rev-�� runs/20260508-060013-10390/test-3953722081 git /usr/bin/gh k/gh-aw/gh-aw/.ggit (http block)
https://api.github.com/repos/actions/download-artifact/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/download-artifact/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv xterm-color git /usr/bin/git --get remote.origin.urapi /usr/bin/git git rev-�� --show-toplevel git /usr/bin/infocmp ; printf '%s' "$git rev-parse st.md","valid":t--show-toplevel infocmp (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv get --local r: $owner, name: $name) { hasDiscussionsEnabled } } gpg.program (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv get --local /usr/bin/git commit.gpgsign (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9.0.0
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv get --local -performance.lock.yml gpg.program (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv get --local munity-attribution.lock.yml commit.gpgsign (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9.0.0 --jq [.object.sha, .object.type] | @tsv get --local -healer.lock.yml pull.rebase (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git 3953722081 config /home/node_modul/repos/actions/github-script/git/ref/tags/v9 git rev-�� --show-toplevel sh /usr/bin/git "prettier" --wrigit 64/pkg/tool/linurev-parse ache/node/24.14.--show-toplevel git (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv user.email test@example.com /usr/bin/git Gitmaster_branchgit Gitmaster_branchrev-parse /usr/bin/git git -C /tmp/gh-aw-test-runs/20260508-060013-10390/test-3953722081 status /usr/bin/git .github/workflowgit config x_amd64/vet git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/go/1.25.8/x64/pkg/tool/linutest@example.com /usr/bin/infocmp ithub/workflows/gh show 1/x64/bin/node infocmp -1 xterm-color 1/x64/bin/node /usr/bin/git ry=1 (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel git /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel node /usr/bin/git /ref/tags/v9 (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv -bool l o.git -errorsas -ifaceassert -nilfunc node /tmp�� /tmp/TestHashConsistency_GoAndJavaScript2455398605/001/test-frontmatter-with-env-template-expresgit -tests /usr/bin/git ithub/workflows credential.helperev-parse /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv repos/{owner}/{repo}/actions/runs/1234567890 --jq /usr/bin/git 81060506/001' 81060506/001' /home/REDACTED/.ca--show-toplevel git -C /tmp/TestGuardPolicyTrustedUsersExpressionCompiledOutput1534058549/001 config /opt/hostedtoolcache/node/24.14.1/x64/bin/node remote.origin.urgit (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git iant-761138432 (http block)
https://api.github.com/repos/aws-actions/configure-aws-credentials/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel gh /usr/bin/git ons-test40135471git --jq ow-without-react--show-toplevel git rev-�� --show-toplevel git /usr/bin/git --get remote.origin.urauth /opt/hostedtoolcstatus git (http block)
- Triggering command: /usr/bin/gh gh api /repos/aws-actions/configure-aws-credentials/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git k/gh-aw/gh-aw/pkgh remote /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git (http block)
https://api.github.com/repos/azure/login/git/ref/tags/v2
- Triggering command: /usr/bin/gh gh api /repos/azure/login/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel s/bot-detection.rev-parse /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel node /usr/bin/git /home/REDACTED/worinfocmp (http block)
https://api.github.com/repos/docker/login-action/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel gh /usr/bin/git /repos/actions/ggit (http block)
https://api.github.com/repos/docker/metadata-action/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv (http block)
https://api.github.com/repos/docker/setup-buildx-action/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv (http block)
https://api.github.com/repos/github/gh-aw
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/gh 3953722081 rev-parse 1/x64/bin/node gh api /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git sistency_GoAndJainfocmp **/*.cjs /home/REDACTED/go/xterm-color git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv --show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv /ref/tags/v9 git sv json' --ignore-pgit (http block)
https://api.github.com/repos/github/gh-aw/actions/runs
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-05-01 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-04-08 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --limit 100 --created >=2026-02-07 (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name -f aw.test l owner=github -f aw.test 0134�� b/workflows -f k/gh-aw/gh-aw/actions/setup/js/node_modules/.bin-nilfunc nore owner=github -f git (http block)
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 config 64/pkg/tool/linux_amd64/vet remote.origin.urgit (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name -f 64/pkg/tool/linux_amd64/compile -f owner=github -f 64/pkg/tool/linux_amd64/compile api 53781074/001 -f /usr/bin/git -f owner=github -f git (http block)
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1234567890
- Triggering command: /usr/bin/gh gh api repos/{owner}/{repo}/actions/runs/1234567890 --jq {databaseId: .id, number: .run_number, url: .html_url, status: .status, conclusion: .conclusion, workflowName: .name, workflowPath: .path, createdAt: .created_at, startedAt: .run_started_at, updatedAt: .updated_at, event: .event, headBranch: .head_branch, 81060506/001' 81060506/001' /home/REDACTED/.cargo/bin/git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name (http block)
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 -f 64/pkg/tool/linux_amd64/link -f owner=github -f 64/pkg/tool/linux_amd64/link -C rity2313691676/001 config e_modules/.bin/node remote.origin.urgit (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name show 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 show 64/pkg/tool/linu-nilfunc l (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name (http block)
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 rev-parse /opt/hostedtoolcache/go/1.25.8/x64/bin/node l (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name config 64/pkg/tool/linux_amd64/compile remote.origin.ur/usr/bin/git (http block)
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 -f kflows/smoke-workflow-call.lock.yml -f owner=github -f node /opt�� view -- 1/x64/bin/node nore (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name rev-parse 64/pkg/tool/linux_amd64/vet l (http block)
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path h ../../../.prettierignore committer.name (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 (http block)
https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md
- Triggering command: /tmp/go-build3013492594/b405/cli.test /tmp/go-build3013492594/b405/cli.test -test.testlogfile=/tmp/go-build3013492594/b405/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true committer.name (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git --show-toplevel git docker-compose git rev-�� /ref/tags/v9 docker-compose sv (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv rite '**/*.cjs' '**/*.ts' '**/*.json' --ignore-path ../../../.pr**/*.json config /usr/bin/git remote.origin.urgit (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv ithub/workflows (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw/.g--thin (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv 587408704/.github/workflows (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv json' --ignore-path ../../../.pr**/*.json (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv json' --ignore-p--detach :latest /usr/bin/gh (http block)
https://api.github.com/repos/google-github-actions/auth/git/ref/tags/v2
- Triggering command: /usr/bin/gh gh api /repos/google-github-actions/auth/git/ref/tags/v2 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/git /tmp/gh-aw-test-git remote clusion,workflow--show-toplevel git rev-�� --show-toplevel git /usr/bin/infocmp thImports2286056git l /usr/bin/gh infocmp (http block)
https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv rite '**/*.cjs' '**/*.ts' '**/*.json' --ignore-path ../../../.pr**/*.json --jq 1/x64/bin/node (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion remote.origin.urgit (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo yml l (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo /home/REDACTED/work/_temp/uv-pytho-f ata/action_pins.node (http block)
- Triggering command: /usr/bin/gh gh workflow list --repo owner/repo --json name,path,state k/gh-aw/gh-aw/actions/setup/js/node_modules/.bin/sh nore (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name h ../../../.prettierignore committer.name r.lock.yml (http block)
https://api.github.com/repos/test/repo
- Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch 587316277 rsion=366e6f8 $name) { hasDiscussionsEnabled } } (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Initial plan

4b3f971

Copilot AI assigned Copilot and gh-aw-bot May 8, 2026

Copilot started work on behalf of gh-aw-bot May 8, 2026 05:13 View session

Copilot AI linked an issue May 8, 2026 that may be closed by this pull request

audit: verbose-only error silencing in AuditWorkflowRun produces silent partial failures #30758

Closed

5 tasks

Copilot AI and others added 2 commits May 8, 2026 05:18

plan: decouple error visibility from verbose flag in AuditWorkflowRun

3897e64

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/2a09ee32-4ac6-48cc-b135-08009b7946f6 Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

fix(audit): always log sub-step errors via auditLog, decouple from ve…

cade9fa

…rbose flag Agent-Logs-Url: https://github.com/github/gh-aw/sessions/2a09ee32-4ac6-48cc-b135-08009b7946f6 Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Fix verbose-only error silencing in AuditWorkflowRun~~ fix(audit): decouple error visibility from verbose flag in AuditWorkflowRun May 8, 2026

Copilot AI requested a review from gh-aw-bot May 8, 2026 05:26

Copilot finished work on behalf of gh-aw-bot May 8, 2026 05:26

pelikhan marked this pull request as ready for review May 8, 2026 05:55

Copilot AI review requested due to automatic review settings May 8, 2026 05:55

Copilot started work on behalf of pelikhan May 8, 2026 05:55 View session

Copilot started reviewing on behalf of pelikhan May 8, 2026 05:56 View session

Copilot AI reviewed May 8, 2026

View reviewed changes

Copilot AI requested a review from pelikhan May 8, 2026 06:02

Copilot finished work on behalf of pelikhan May 8, 2026 06:02

pelikhan merged commit 6145596 into main May 8, 2026

pelikhan deleted the copilot/audit-fix-silent-errors branch May 8, 2026 06:02

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(audit): decouple error visibility from verbose flag in AuditWorkflowRun#30939

fix(audit): decouple error visibility from verbose flag in AuditWorkflowRun#30939
pelikhan merged 4 commits intomainfrom
copilot/audit-fix-silent-errors

Copilot AI commented May 8, 2026 •

edited

Loading

Uh oh!

pelikhan commented May 8, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI commented May 8, 2026 •

edited

Loading

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

Copilot AI commented May 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

pelikhan commented May 8, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Copilot AI commented May 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Copilot AI commented May 8, 2026 •

edited

Loading

Copilot AI commented May 8, 2026 •

edited

Loading