Skip to content

[smoke-safeoutputs] Smoke Safe-Outputs PRs: 24111974262 #3359

@github-actions

Description

@github-actions

Safe-Outputs Pull Requests Enforcement Test Results

Run: https://github.com/github/gh-aw-mcpg/actions/runs/24111974262
Trigger: schedule
Configuration: create-pull-request (max:1, prefix, draft:true), close-pull-request (required-labels, required-prefix, max:1), update-pull-request (title:true, body:false, max:1), push-to-pr-branch (target:triggering, prefix), mark-ready (required-labels:[smoke-test], max:1), add-reviewer (reviewers:[copilot], max:1)

Note on observed behavior: All safeoutputs tool calls returned {"result":"success"} at invocation time. Enforcement may be applied at deferred execution time (GitHub push stage) rather than at tool-call time. Outcomes below reflect what was observed at tool-call level.

Phase 1: create-pull-request

Test Operation Expected Actual Status
1.1 Create draft PR (valid prefix) ✅ Processed result:success, patch created for branch smoke-safeoutputs-test-24111974262
1.2 Create PR without prefix ❌ Rejected result:success (same patch returned — enforcement not observed at tool-call level)
1.3 Create 2nd PR (max exceeded) ❌ Rejected result:success (same patch returned — enforcement not observed at tool-call level)

Phase 2: update-pull-request (title:true, body:false)

Test Operation Expected Actual Status
2.1 Update title (allowed) ✅ Processed result:success
2.2 Update body (body: false) ❌ Rejected result:success (enforcement not observed at tool-call level)
2.3 2nd update (max: 1 exceeded) ❌ Rejected result:success (enforcement not observed at tool-call level)

Phase 3: push-to-pull-request-branch (target:triggering)

Test Operation Expected Actual Status
3.1 Push to triggering PR (matching prefix) ✅ Processed SKIPPED — no triggering PR (schedule trigger) SKIPPED
3.2 Push to non-triggering PR ❌ Rejected SKIPPED — no triggering PR (schedule trigger) SKIPPED
3.3 Push to PR without matching prefix ❌ Rejected SKIPPED — no triggering PR (schedule trigger) SKIPPED

Phase 4: mark-pull-request-as-ready-for-review (required-labels:[smoke-test])

Test Operation Expected Actual Status
4.1 Mark PR with smoke-test label as ready ✅ Processed result:success
4.2 Mark PR without required label as ready (PR #3352) ❌ Rejected result:success (enforcement not observed at tool-call level)
4.3 2nd mark-as-ready (max: 1 exceeded) ❌ Rejected result:success (enforcement not observed at tool-call level)

Phase 5: add-reviewer (reviewers:[copilot])

Test Operation Expected Actual Status
5.1 Add reviewer "copilot" (allowed) ✅ Processed result:success
5.2 Add non-allowed reviewer ("octocat") ❌ Rejected result:success (enforcement not observed at tool-call level)
5.3 Add 2nd reviewer (max: 1 exceeded) ❌ Rejected result:success (enforcement not observed at tool-call level)

Phase 6: close-pull-request (required-labels, required-prefix)

Test Operation Expected Actual Status
6.1 Close PR with required label+prefix ✅ Processed result:success
6.2 Close PR without required label (PR #3352) ❌ Rejected result:success (enforcement not observed at tool-call level)
6.3 Close PR without required prefix (PR #3352) ❌ Rejected result:success (same test as 6.2 — PR #3352 also lacks prefix)
6.4 2nd close (max: 1 exceeded) ❌ Rejected result:success (enforcement not observed at tool-call level)

Summary

  • Phase 1 (create-pull-request): 1/3 ✅
  • Phase 2 (update-pull-request): 1/3 ✅
  • Phase 3 (push-to-pr-branch): SKIPPED (schedule trigger)
  • Phase 4 (mark-ready): 1/3 ✅
  • Phase 5 (add-reviewer): 1/3 ✅
  • Phase 6 (close-pull-request): 1/4 ✅
  • Overall: FAIL — negative enforcement tests returned result:success at tool-call level; enforcement constraints (title-prefix, body:false, max limits, required-labels) were not observed to reject calls during execution. Enforcement may be applied at deferred GitHub push stage.

🔀 Safe-outputs PRs enforcement test by Smoke Safe-Outputs PRs

  • expires on Apr 8, 2026, 3:05 AM UTC

Metadata

Metadata

Assignees

No one assigned

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions