Code Simplifier: allow required validation commands in sandbox tool permissions

[Copilot]

Code Simplifier failed because its prompt requires local validation commands that were not in the workflow bash allowlist, causing repeated tool/permission denials and wasted token budget. This change aligns declared permissions with the workflow’s intended command surface.

• Problem alignment

  • Code Simplifier instructs the agent to run make test-unit, make lint, and make build, but those commands were blocked by tool permissions in runtime.

• Workflow source update (.github/workflows/code-simplifier.md)

  • Expanded tools.bash allowlist to include required validation/build commands:
    • make test-unit
    • make lint
    • make build
    • make fmt
    • go build ./...

• Compiled manifest update (.github/workflows/code-simplifier.lock.yml)

  • Regenerated lockfile so emitted --allow-tool 'shell(...)' entries match the updated source workflow and runtime permissions.

tools:
  bash:
    - "cat /tmp/gh-aw/code-simplifier/recent-context.json"
    - "cat /tmp/gh-aw/code-simplifier/source-files.json"
    - "cat /tmp/gh-aw/code-simplifier/recent-prs.json"
    - "cat /tmp/gh-aw/code-simplifier/recent-commits.jsonl"
    - "cat /tmp/gh-aw/code-simplifier/history-summary.json"
    - "ls /tmp/gh-aw/code-simplifier"
    - "make test-unit"
    - "make lint"
    - "make build"
    - "make fmt"
    - "go build ./..."

[Copilot]

Pull request overview

This PR updates the Code Simplifier agent workflow permissions so the sandboxed shell tool can run the same local validation commands the workflow prompt asks the agent to execute, avoiding repeated tool/permission denials during runs.

Changes:

• Expanded the tools.bash allowlist in .github/workflows/code-simplifier.md to permit additional make/go validation commands.
• Regenerated .github/workflows/code-simplifier.lock.yml so the compiled --allow-tool shell(...) entries match the updated allowlist.

Show a summary per file

File	Description
.github/workflows/code-simplifier.md	Adds make/go commands to the bash allowlist for agent-side validation.
.github/workflows/code-simplifier.lock.yml	Updates the compiled workflow manifest to include the newly allowed shell commands.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 2/2 changed files
• Comments generated: 1