fix: address 4 security findings — env.* expression blocklist, protocol-relative URL sanitization, git hook injection, MCP token permissions by Copilot · Pull Request #23934 · github/gh-aw

Copilot · 2026-04-01T16:41:44Z

Six open security findings from @szabta89 were sitting unresolved. This PR patches the four that have clear code-level fixes; the remaining two (#23740, #23079) require architectural changes to the MCP gateway and AWF network stack.

#22914 — `env.*` expressions now blocked at compile time

env.* in workflow markdown was allowed and compiled into the lock file, wiring values like ${{ env.GITHUB_TOKEN }} directly into the agent's runtime environment. Added vars.* (non-secret GitHub Variables) as the safe replacement; env.* now produces a compile error.

# blocked
${{ env.GITHUB_TOKEN }}

# allowed replacement
${{ vars.TARGET_REPOSITORY }}

Removed envRegex from ExpressionValidationOptions; added varsRegex (^vars\.[a-zA-Z0-9_-]+$)
Updated production workflows (contribution-check.md, stale-repo-identifier.md) to use vars.* / inputs.*
Recompiled all 179 lock files

#23737 — Protocol-relative URLs now blocked by domain allowlist

//evil.com/steal bypassed both sanitizeUrlProtocols() (requires explicit scheme) and sanitizeUrlDomains() (only matched https://). Extended sanitizeUrlDomains with a second pass for //hostname/path, sharing the existing domain-allowlist logic via a checkDomain helper. Negative lookbehind (?<![:/\w]) prevents false positives on https://example.com//path.

#23739 — Git hooks cleared after cache restore

.git/hooks/ files written by an agent in run N survived the cache archive and executed on the host runner in run N+1 before the AWF sandbox started. Now deletes all files under .git/hooks/ immediately after restore, and sets core.hooksPath=/dev/null to prevent any future hook execution.

#22908 — MCP config files restricted to `0600`

All four engine gateway config files (claude, copilot, codex, gemini) were written with default 0644, making bearer tokens readable by any process running as the same user. Added chmod 0600 after each write.

Not addressed (architectural scope)

Safe-outputs write-sink MCP must use a distinct, scoped bearer token not shared with the read GitHub MCP #23740 — safe-outputs MCP write-sink needs a distinct, process-scoped bearer token
AWF allowlist not enforced for plain-HTTP connections to numeric IPs; web-fetch may bypass proxy enforcement #23079 — AWF allowlist must intercept plain-HTTP to numeric IPs and web-fetch egress

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw git 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git ions/setup/js/sagit test-9RPFli/testrev-parse ache/node/24.14.--show-toplevel git (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw 0/x64/bin/node /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git (http block)
https://api.github.com/orgs/test-owner/actions/secrets
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name er=verbose git x_amd64/link * origin it x_amd64/link cat-�� h ../../../.pret.prettierignore 2ef20bec6532703f--log-level=error tions/node_modules/.bin/git HEAD^ ere de_modules/.bin/--write zh/xEvG_UL85iArX../../../**/*.json (http block)
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name --show-toplevel git /usr/bin/git --show-toplevel /opt/hostedtoolc/tmp/fuzz-process-4038301850.js /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha user.email test@example.com /usr/bin/git ub/workflows tions/setup/js/nrev-parse d94b576/node_mod--show-toplevel git init�� it tions/setup/js/nTest User /usr/bin/git ./../pkg/workflogit t.test.cjs x_amd64/vet /usr/bin/git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha --show-toplevel node /usr/bin/git install --package-lock-orev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/grep git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha ache/go/1.25.0/x--show-toplevel git /opt/hostedtoolcache/node/24.14.0/x64/bin/node --show-toplevel ache/go/1.25.0/xrev-parse /usr/bin/git node js/f�� 7035499/b358/imp--show-toplevel git /opt/hostedtoolcache/node/24.14.0/x64/bin/node --get remote.origin.urrev-parse /usr/bin/git node (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha --write ../../../**/*.json ache/node/24.14.0/x64/bin/node --ignore-path ../../../.prettirev-parse x_amd64/compile gh t-10�� sistency_InlinedImports779338384/001/inlined-a.md --jq /usr/bin/git er=verbose git x_amd64/link git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel k/gh-aw/gh-aw/acrev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel 64/pkg/tool/linurev-parse /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha --show-toplevel git 0/x64/bin/node 44/001/go/1.25.0git git /usr/bin/git git cjs --show-toplevel git ache/node/24.14.0/x64/bin/node --show-toplevel git /usr/bin/infocmp--show-toplevel git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha 1965251050 git ash HEAD branch 0/x64/lib/node_msecrets.TOKEN /opt/hostedtoolcache/node/24.14.-trimpath --ex�� til.go til_test.go x_amd64/vet node --conditions development x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --show-toplevel ache/node/24.14.config /usr/bin/git lex-frontmatter-git git t.test.cjs git rev-�� --show-toplevel git /usr/bin/git test-htPx2Q/compgit git n-dir/node git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --show-toplevel sh /usr/bin/git rite '../../../*git -dwarf=false ache/go/1.25.0/x--show-toplevel git rev-�� --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet 86_64/node "vitest" run actgit /tmp/go-handler-rev-parse /opt/hostedtoolc--show-toplevel git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha ts.result rev-parse /usr/bin/git with-tools.md tions/setup/js/nrev-parse 64/pkg/tool/linu--show-toplevel git add .github/workflows/test.md 64/pkg/tool/linurev-parse /usr/bin/git json' --ignore-pgit f8511847cbbda5a4rev-parse 0/x64/bin/bash git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha /tmp/go-build3365016521/b445/_pkg_.a -trimpath /usr/bin/git -p github.com/githurev-parse -lang=go1.25 git conf�� --get remote.origin.url (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha --show-toplevel /opt/hostedtoolcache/node/24.14.0/x64/bin/node /usr/bin/git 0206-18128/test-git /home/REDACTED/worrev-parse .cfg git rev-�� --show-toplevel node /usr/bin/git run actions/setup/jsrev-parse 64/pkg/tool/linu--show-toplevel git (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha er=verbose git tions/node_modules/.bin/git * '/tmp/push-signe-c bin/git git rev-�� h ../../../.prettierignore 2ef20bec6532703f211a20c0..HEAD cal/bin/node run ere /git /bin/sh (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha h ../../../.prettierignore 2ef20bec6532703f211a20c0 64/bin/git -m ere cal/bin/git EBh5VjaADAVW k/gh�� w/js/**/*.json' --ignore-path git tions/node_modules/.bin/go -1 --format=%B es/.bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha h ../../../.pret.prettierignore 2ef20bec6532703f--log-level=error k/gh-aw/gh-aw/node_modules/.bin/node HEAD^ ere k/gh-aw/gh-aw/ac--write /bin/sh k/gh�� w/js/**/*.json' --ignore-path git p/bin/git d-bare-KxzcvW' d-bare-KxzcvW' in/git git (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha xterm-color 0/x64/bin/node r,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,disp--show-toplevel --count flow-12345 64/pkg/tool/linu--show-toplevel git -C /tmp/gh-aw-test-runs/20260401-170206-18128/test-649841622 rev-parse /usr/bin/git @{u} f8511847cbbda5a4rev-parse ortcfg.link git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha y_with_explicit_repo1260288818/001 git /usr/bin/git --show-toplevel /opt/hostedtoolcrev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel /opt/hostedtoolcrev-parse /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha --show-toplevel git /usr/bin/git /tmp/gh-aw-test-git rev-parse /usr/bin/gh git rev-�� --show-toplevel gh /opt/hostedtoolcache/node/24.14.0/x64/bin/node /repos/actions/ggit --jq /usr/bin/git node (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha /repos/actions/github-script/git/ref/tags/v8 --jq /usr/bin/git --count tions/setup/js/nrev-parse 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel siWHJxF12LLI /usr/bin/git json' --ignore-pgit f8511847cbbda5a4rev-parse ache/go/1.25.0/x--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha /home/REDACTED/work/gh-aw/gh-aw/.github/workflows/agentic-observability-kit.md git /usr/bin/git --show-toplevel infocmp (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha --show-toplevel git /usr/bin/git k/gh-aw/gh-aw/pkgit git /usr/bin/git git rev-�� --show-toplevel git /opt/hostedtoolcache/node/24.14.0/x64/bin/node /tmp/compile-allgit (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE node (http block)
https://api.github.com/repos/github/gh-aw
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .visibility -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE r: $owner, name: $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0 --jq .object.sha -json GO111MODULE 64/bin/go ngci-lint" ]; thgo GOMOD GOMODCACHE /bin/sh -c if ! cd actions/GOINSECURE GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go sh (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq .object.sha /tmp/TestHashConsistency_GoAndJavaScript1671862612/001/test-inlined-imports-enabled-with-env-temgit ode_modules/vite-buildtags /usr/bin/git onfig.json k/gh-aw/gh-aw/acrev-parse bin/go git -C /tmp/gh-aw-test-runs/20260401-170206-18128/test-649841622 status /usr/bin/git .github/workflowgit k/gh-aw/gh-aw/pkrev-parse 0/x64/bin/node git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel 5016521/b444/imprev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel node /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq .object.sha 0206-18128/test-649841622 **/*.cjs 5016521/b398/vet.cfg **/*.json --ignore-path ../../../.pretti--show-toplevel sh -c "prettier" --write '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' --- 64/pkg/tool/linux_amd64/compile 0/x64/bin/node rror st/suppress-warnrev-parse 0/x64/bin/node /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linuf() { test "$1" = get && echo "******"; }; f get (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel ache/node/24.14.rev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel k/gh-aw/gh-aw/acrev-parse /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq .object.sha --show-toplevel /opt/hostedtoolc--package-lock-only 0/x64/bin/node github..actor bash /usr/bin/git git rev-�� --show-toplevel git 0/x64/bin/node --show-toplevel git /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq .object.sha licyMinIntegrityOnlymin-integrity_only_defaults_repo357361398/001 **/*.cjs 5016521/b402/_pkg_.a l --ignore-path ../../../.pretti--show-toplevel sh -c "prettier" --write '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' ---p 64/pkg/tool/linux_amd64/compile ache/node/24.14.0/x64/bin/node rror st/suppress-warnrev-parse run-script/lib/n--show-toplevel /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linuREDACTED (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel ache/node/24.14.rev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel k/gh-aw/gh-aw/acrev-parse /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq .object.sha --show-toplevel git 0/x64/bin/node --show-toplevel git /usr/bin/git git rev-�� ithub-script/git/ref/tags/v8 git 0/x64/bin/node FieldEnforcementgit git /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 git h origin ings.cjs run-script/lib/n--show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/compile rev-�� */*.ts' '**/*.json' --ignore-path ../../../.pret.prettierignore forks.js tnet/tools/sh /tmp/push-signedgit tailed body textrev-parse (http block)
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 git de_modules/.bin/sh --reverse origin/fallback-rev-parse 0/x64/bin/git git rev-�� */*.ts' '**/*.json' --ignore-patremote.origin.url git k/_temp/uv-python-dir/sh /tmp/push-signedgit tailed body textrev-parse es/.bin/git git (http block)
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel node /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 git x_amd64/link --reverse origin/fallback-/tmp/js-hash-test-3376009094/test-hash.js de/node/bin/git x_amd64/link rev-�� */*.ts' '**/*.json' --ignore-path ../../../.prettierignore git ache/uv/0.11.2/x86_64/sh /tmp/push-signedgit tailed body textrev-parse git 0M/1Fap-IuZJNLVp9lBXgZ8/WLtSFBQ1EBh5VjaADAVW (http block)
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git ache/node/24.14.0/x64/bin/node --show-toplevel /opt/hostedtoolcrev-parse /usr/bin/git ache/node/24.14.0/x64/bin/node (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 git ules/.bin/sh origin ings.cjs rgo/bin/git git rev-�� 1833508029/.github/workflows forks.js nfig/composer/vendor/bin/sh /tmp/push-signedgit tailed body textrev-parse it git (http block)
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 git tions/node_modules/.bin/sh origin ings.cjs cal/bin/git git rev-�� */*.ts' '**/*.json' --ignore-path ../../../.prettierignore forks.js de/node/bin/sh /tmp/push-signedgit tailed body textrev-parse ules/.bin/git git (http block)
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� 4194479007 git /usr/bin/git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 git de_modules/.bin/-lang=go1.25 origin ings.cjs t git rev-�� */*.ts' '**/*.jsgo1.25.0 forks.js rgo/bin/sh /tmp/push-signedgit tailed body textinit bin/git git (http block)
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� 4194479007 git ache/node/24.14.0/x64/bin/node ature-branch.patgit git /usr/bin/git ache/node/24.14.0/x64/bin/node (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 git bin/sh origin ings.cjs modules/@npmcli/--show-toplevel git rev-�� 1833508029/.github/workflows forks.js p/bin/sh /tmp/push-signedgit tailed body textrev-parse /bin/sh git (http block)
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 git ache/node/24.14.0/x64/bin/node --show-toplevel git /usr/bin/gh ache/node/24.14.0/x64/bin/node 1845�� t1862646663/.github/workflows gh /usr/bin/git ature-branch.patgit --jq /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path email "test@exam**/*.ts git k/gh-aw/gh-aw/ac--ignore-path -u ings.cjs tions/node_modulrun git cat-�� h ../../../.prettierignore ode_modules/vitest/suppress-warnings.cjs 0/x64/bin/git * git de/node/bin/git ode_modules/vitest/dist/workers/run (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 refs/heads/race--o it ache/node/24.14.-trimpath mpor�� js/**/*.json' ---p k/gh-aw/gh-aw/acmain 64/bin/go HEAD refs/heads/main modules/@npmcli//tmp/gh-aw-test-runs/20260401-170206-18128/test-1944880169/.github/workflows k/gh-aw/gh-aw/acconfig (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 Extra commit node x_amd64/vet rev-�� '**/*.ts' '**/*.@{u} git sh origin fallback-branch rgo/bin/git xry_5731THPQw/FJx2V9JL74AiqPLzD1--jq (http block)
https://api.github.com/repos/github/gh-aw/contents/.github%2Fworkflows%2Faudit-workflows.md
- Triggering command: /opt/hostedtoolcache/node/24.14.0/x64/bin/node /opt/hostedtoolcache/node/24.14.0/x64/bin/node --experimental-import-meta-resolve --require /home/REDACTED/work/gh-aw/gh-aw/actions/setup/js/node_modules/vitest/suppress-warnings.cjs --conditions node --conditions development /home/REDACTED/work/gh-aw/gh-aw/actions/setup/js/node_modules/vitest/dist/workers/forks.js (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq .object.sha --show-toplevel k/gh-aw/gh-aw/acTest User /usr/bin/git test-Tlw9eX/slowgit git h git rev-�� --show-toplevel git /usr/bin/git edOutput42083507git git x_amd64/compile git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq .object.sha github.event.release.assets[0].id git /usr/bin/git ache/node/24.14.git git 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git --show-toplevel git /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel node /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha '**/*.ts' '**/*.json' --ignore-p-c=4 git /usr/local/.ghcup/bin/git --name-status aa985d7c7aa7aee6rev-parse bin/git git --ve�� .js' --ignore-path .prettierignore --log-level=error git tions/node_modules/.bin/node --bare D run-script/lib/n--show-toplevel node (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha (create_pull_request|push_to_pull_request_branch)" 5016521/b434/sliceutil.test /usr/bin/git t0 -buildtags (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha e:]]*"$[^"]*$".*/\1/p resolved$ /usr/bin/git b/workflows git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq .object.sha f8511847cbbda5a42ef20bec6532703f211a20c0..HEAD k/gh-aw/gh-aw/actions/setup/js/node_modules/vitest/suppress-warn--conditions modules/@npmcli/run-script/lib/node-gyp-bin/node 3b20d84ccf8cb3de/opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/compile e/git /git 0/x64/bin/node /pre�� --is-ancestor tions/setup/js/ngithub.com/github/gh-aw/pkg/envutil 64/pkg/tool/linu-lang=go1.25 HEAD refs/heads/main in/git 64/pkg/tool/linurev-parse (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq .object.sha --noprofile git /usr/bin/git --show-toplevel sh /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel sh /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha f8511847cbbda5a42ef20bec6532703f211a20c0..HEAD k/gh-aw/gh-aw/actions/setup/js/node_modules/vitest/suppress-warn--conditions 0/x64/bin/node 3b20d84ccf8cb3de/opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet git de_modules/.bin/-bool 0/x64/bin/node /pre�� r/work/gh-aw/gh--errorsas tions/setup/js/n-ifaceassert 64/pkg/tool/linu-nilfunc HEAD refs/heads/main 86_64/git 64/pkg/tool/linurev-parse (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha f8511847cbbda5a42ef20bec6532703f211a20c0..HEAD --stdout 0/x64/bin/node 3b20d84ccf8cb3de/tmp/go-build3365016521/b396/cli.test git k/gh-aw/gh-aw/ac-test.paniconexit0 0/x64/bin/node ve r/work/gh-aw/gh--test.timeout=10m0s tions/setup/js/n-test.run=^Test tions/setup/node-test.short=true /tmp/push-signedgit branch..HEAD 0/x64/bin/git tions/setup/js/nconfig (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha ll 2>&1 --stdout 0/x64/bin/node 3b20d84ccf8cb3degit git 0/x64/bin/git 0/x64/bin/node .cjs�� r/work/gh-aw/gh-aw/actions/setup/js/generate_safe_outputs_tools.cjs f8511847cbbda5a42ef20bec6532703f211a20c0..HEAD 0/x64/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin/go /tmp/push-signedgit branch..HEAD _modules/.bin/gi/tmp/TestGuardPolicyTrustedUsersCompiledOutput2867357566/001 git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq .object.sha f8511847cbbda5a42ef20bec6532703f211a20c0..HEAD k/gh-aw/gh-aw/actions/setup/js/node_modules/vitest/suppress-warn--conditions 0/x64/bin/node 3b20d84ccf8cb3de/opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/link git ode-gyp-bin/node/tmp/go-build3365016521/b396/cli.test 0/x64/bin/node ve r/work/gh-aw/gh--s tions/setup/js/n-w /error HEAD refs/heads/main bin/git /error (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq .object.sha hub.event.issue.title }} git /usr/bin/git --show-toplevel sh /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git nPathSetup_Goroogit sh /usr/bin/git git (http block)
https://api.github.com/repos/githubnext/agentics/git/ref/tags/
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha s7yM/vmZDNiZnpQgGOINSECURE GO111MODULE $name) { hasDiscussionsEnabled } } GOINSECURE GOMOD GOMODCACHE 2160283/b396/impGOPROXY -c che/go-build/96/GOSUMDB GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go /opt/hostedtoolcrev-parse (http block)
https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha '**/*.ts' '**/*.json' --ignore-p-c=4 git 0/x64/bin/sh --name-status aa985d7c7aa7aee6rev-parse k/gh-aw/gh-aw/ac--show-toplevel l2/Ut612OBXueNp0eLGih9P/MnNd7ePdzEVMfEX_ucvu --ve�� .js' --ignore-path .prettierignore --log-level=error git ules/.bin/node --bare branch 0/x64/bin/git node (http block)
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/compile /usr/bin/git 5016521/b439/_pkgit -buildtags 5016521/b439=> git rev-�� --show-toplevel git /usr/bin/git OLk_/itQHdXVlQ_xgit config /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha /usr/bin/git resolved$ /usr/bin/git b/workflows git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion -1 ings.cjs run-script/lib/n--git-dir ache/node/24.14.0/x64/bin/node tion�� 1740166866/.github/workflows k/gh-aw/gh-aw/actions/setup/js/node_modules/vitest/suppress-warnings.cjs tions/node_modules/.bin/sh ed-bare-Lmzzot' ode_modules/viterev-parse tions/setup/node--show-toplevel k/gh-aw/gh-aw/actions/setup/js/ntest@example.com (http block)
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel node /usr/bin/git git (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo /node -u (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo n-dir/git -u (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo /usr/bin/git --show-toplevel XL/6lypVb0Kpctatrev-parse /usr/bin/git git rev-�� --show-toplevel git .cfg --show-toplevel go /usr/bin/git git (http block)
https://api.github.com/repos/owner/repo/contents/file.md
- Triggering command: /tmp/go-build3365016521/b396/cli.test /tmp/go-build3365016521/b396/cli.test -test.testlogfile=/tmp/go-build3365016521/b396/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true -bare-zYdD9I Initial commit 0/x64/bin/git ode_modules/vitescripts/**/*.js -c ath ../../../.pr.prettierignore 2ef20bec6532703f--log-level=error k/gh-aw/gh-aw/acDROP -m Race commit tnet/tools/git git (http block)
- Triggering command: /tmp/go-build2087035499/b374/cli.test /tmp/go-build2087035499/b374/cli.test -test.testlogfile=/tmp/go-build2087035499/b374/testlog.txt -test.paniconexit0 -test.timeout=10m0s rev-�� --show-toplevel git /usr/bin/git --show-toplevel k/gh-aw/gh-aw/acrev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel 64/pkg/tool/linu-1 /usr/bin/git git (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name er=verbose git x_amd64/compile * origin tnet/tools/git x_amd64/compile cat-�� h ../../../.pret.prettierignore 2ef20bec6532703f--log-level=error tions/setup/js/node_modules/.bin/git HEAD^ ere es/.bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name --show-toplevel git ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet --show-toplevel /opt/hostedtoolcrev-parse /usr/bin/git ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet rev-�� --show-toplevel git /usr/bin/git --show-toplevel /opt/hostedtoolcrev-parse /usr/bin/git git (http block)
invalid.example.invalid
- Triggering command: /usr/lib/git-core/git-remote-https /usr/lib/git-core/git-remote-https origin https://invalid.example.invalid/nonexistent-repo.git git conf�� user.name lure tions/setup/js/node_modules/.bin/git -M main /usr/sbin/git git init�� --bare --initial-branch=main k/gh-aw/gh-aw/actions/setup/js/node_modules/.bin/git '/tmp/bare-incregit '/tmp/bare-increadd cal/bin/git git (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

…#23739, #22908) Agent-Logs-Url: https://github.com/github/gh-aw/sessions/091b08a2-ecaf-4440-ac26-63ff74183d19 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/091b08a2-ecaf-4440-ac26-63ff74183d19 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Initial plan

c92ed14

Copilot AI assigned Copilot and pelikhan Apr 1, 2026

Copilot started work on behalf of pelikhan April 1, 2026 16:41 View session

Copilot AI linked an issue Apr 1, 2026 that may be closed by this pull request

[deep-report] Triage and prioritize 6 open security findings from szabta89 #23922

Closed

Copilot AI and others added 2 commits April 1, 2026 17:17

fix: address 4 security findings from security triage (#22914, #23737, …

0093fdc

…#23739, #22908) Agent-Logs-Url: https://github.com/github/gh-aw/sessions/091b08a2-ecaf-4440-ac26-63ff74183d19 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

fix: strengthen git hook cleanup and document regex correctness

249cbcd

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/091b08a2-ecaf-4440-ac26-63ff74183d19 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Triage and prioritize 6 security findings from szabta89~~ fix: address 4 security findings — env.* expression blocklist, protocol-relative URL sanitization, git hook injection, MCP token permissions Apr 1, 2026

Copilot AI requested a review from pelikhan April 1, 2026 17:24

Copilot finished work on behalf of pelikhan April 1, 2026 17:24

This was referenced Apr 1, 2026

[PR Triage Report] PR Triage Report - 2026-04-01 #23937

Closed

[aw] No-Op Runs #23927

Closed

pelikhan closed this Apr 1, 2026

github-actions bot deleted the copilot/deep-report-triage-security-findings branch April 9, 2026 02:58

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix: address 4 security findings — env.* expression blocklist, protocol-relative URL sanitization, git hook injection, MCP token permissions#23934

fix: address 4 security findings — env.* expression blocklist, protocol-relative URL sanitization, git hook injection, MCP token permissions#23934
Copilot wants to merge 3 commits intomainfrom
copilot/deep-report-triage-security-findings

Copilot AI commented Apr 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

Copilot AI commented Apr 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

#22914 — env.* expressions now blocked at compile time

#23737 — Protocol-relative URLs now blocked by domain allowlist

#23739 — Git hooks cleared after cache restore

#22908 — MCP config files restricted to 0600

Not addressed (architectural scope)

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Copilot AI commented Apr 1, 2026 •

edited

Loading

#22914 — `env.*` expressions now blocked at compile time

#22908 — MCP config files restricted to `0600`