fix(schema): add allowed-repos to remove-labels and assign-to-user schema#18132
fix(schema): add allowed-repos to remove-labels and assign-to-user schema#18132
allowed-repos to remove-labels and assign-to-user schema#18132Conversation
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
…hema Fixes a validation gap where allowed-repos was accepted inline for add-labels and unassign-from-user but rejected for assign-to-user and remove-labels due to missing property in the JSON schema. The Go structs and compiler config generation code already supported AllowedRepos for both types via the embedded SafeOutputTargetConfig. Only the JSON schema was missing the property definition. Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
allowed-repos to remove-labels and assign-to-user schema
There was a problem hiding this comment.
Pull request overview
This PR adds the allowed-repos field to the JSON schema for remove-labels and assign-to-user safe output configurations, fixing a schema validation gap where the field was rejected during compilation despite being supported by the underlying Go structs.
Changes:
- Added
allowed-reposarray property toremove-labelsandassign-to-userin the main workflow schema, matching the existing pattern inadd-labelsandunassign-from-user - Removed the unused
copilot-requestspermission from the GitHub workflow schema (unrelated cleanup)
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| pkg/workflow/schemas/github-workflow.json | Removes unused copilot-requests permission entry (unrelated cleanup mentioned in changeset) |
| pkg/parser/schemas/main_workflow_schema.json | Adds allowed-repos field to remove-labels (lines 5588-5593) and assign-to-user (lines 5839-5845) schemas with appropriate descriptions |
Comments suppressed due to low confidence (1)
pkg/parser/schemas/main_workflow_schema.json:5845
- The schema changes correctly add
allowed-reposto the JSON schema, which will allow the YAML to compile and the field will be parsed into the Go structs via the embeddedSafeOutputTargetConfig. However, the runtime configuration generation inpkg/workflow/safe_outputs_config_generation.godoes not emit these fields to the handler configuration inconfig.json/GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG.
Specifically, lines 315-320 use generateMaxWithAllowedAndBlockedConfig for assign_to_user, which only includes max, allowed, and blocked fields. This means the following fields from SafeOutputTargetConfig will be missing from the runtime config:
target(already in schema)target-repo(already in schema)allowed-repos(newly added in this PR)
Additionally, the unassign-first field (also in the Go struct and schema) is not being emitted.
For assign_to_user to work correctly with all its schema-defined fields, the config generation should be updated to use generateTargetConfigWithRepos like add_labels does (lines 272-282). The pattern should include allowed, blocked, and unassign_first in additionalFields.
Without this fix, allowed-repos will compile without errors but won't be included in the runtime configuration, rendering the feature non-functional.
"allowed-repos": {
"type": "array",
"items": {
"type": "string"
},
"description": "List of allowed repositories in format 'owner/repo' for cross-repository user assignment operations. Use with 'repo' field in tool calls."
}
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "allowed-repos": { | ||
| "type": "array", | ||
| "items": { | ||
| "type": "string" | ||
| }, | ||
| "description": "List of additional repositories in format 'owner/repo' that labels can be removed from. When specified, the agent can use a 'repo' field in the output to specify which repository to remove labels from. The target repository (current or target-repo) is always implicitly allowed." |
There was a problem hiding this comment.
The schema changes correctly add allowed-repos to the JSON schema, which will allow the YAML to compile and the field will be parsed into the Go structs via the embedded SafeOutputTargetConfig. However, the runtime configuration generation in pkg/workflow/safe_outputs_config_generation.go does not emit these fields to the handler configuration in config.json / GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG.
Specifically, lines 285-289 use generateMaxWithAllowedConfig for remove_labels, which only includes max and allowed fields. This means the following fields from SafeOutputTargetConfig will be missing from the runtime config:
target(already in schema)target-repo(already in schema)allowed-repos(newly added in this PR)
Additionally, the blocked field (also in the Go struct and schema) is not being emitted.
For remove_labels to work correctly with all its schema-defined fields, the config generation should be updated to use generateTargetConfigWithRepos like add_labels does (lines 272-282). The same pattern should include blocked in additionalFields.
Without this fix, allowed-repos will compile without errors but won't be included in the runtime configuration, rendering the feature non-functional.
This issue also appears on line 5839 of the same file.
| "checks": { | ||
| "$ref": "#/definitions/permissions-level" | ||
| }, |
There was a problem hiding this comment.
The removal of the copilot-requests permission from the GitHub workflow schema is unrelated to the stated purpose of this PR, which is to add allowed-repos to remove-labels and assign-to-user schema. While the changeset .changeset/patch-merge-detection-job.md indicates this removal is intentional ("removed the unused copilot-requests permission schema entry"), this change should ideally be in a separate PR focused on that specific cleanup to maintain clear PR scope and make reviews easier.
allowed-reposwas silently missing from the JSON schema forremove-labelsandassign-to-user, causing compile errors despite the Go structs and runtime config generation already fully supporting the field via the embeddedSafeOutputTargetConfig.Changes
pkg/parser/schemas/main_workflow_schema.json: Addedallowed-reposarray property toremove-labelsandassign-to-userschema objects, matching the existing definitions inadd-labelsandunassign-from-userBefore / After
After this fix, both compile cleanly and
allowed_reposis correctly emitted intoGH_AW_SAFE_OUTPUTS_HANDLER_CONFIGat runtime (the compiler wiring was already correct).Warning
Firewall rules blocked me from connecting to one or more addresses (expand for details)
I tried to connect to the following addresses, but was blocked by firewall rules:
https://api.github.com/graphql/usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw main -lang=go1.25 git t-36�� k/gh-aw/gh-aw/.github/workflows/agent-performance-analyzer.md -dwarf=false /usr/bin/git go1.25.0 -c=4 -nolocalimports git(http block)/usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw x_amd64/vet /usr/bin/git git conf�� r/repo.git remote.origin.url /usr/bin/git --show-toplevel go /usr/bin/git git(http block)/usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw -test.parallel=4origin /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git(http block)https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1/usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha WR4t/vrm3hgp6QCODr4K3WR4t GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go 3628�� -json l /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/link GOINSECURE GOMOD GOMODCACHE /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/link(http block)/usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha --show-toplevel git /usr/bin/git = get && echo "pgit = get && echo "prev-parse /opt/hostedtoolc--show-toplevel git rev-�� runs/20260224-122431-31846/test-858115828/custom/workflows node 0/x64/bin/node l node -d 0/x64/bin/node(http block)/usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha source '/home/REDACTED/work/gh-aw/gh-aw/actions/setup/sh/sanitize_path.sh' '/usr/bin:/usr/local/bigit git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git runs/20260224-12git git /usr/bin/git git(http block)https://api.github.com/repos/actions/checkout/git/ref/tags/v3/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env 2332-27950/test-1403846057/.github/workflows GO111MODULE .cfg GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha --oneline e76a5eb74234da086be767b8ccaca7a75c288549..HEAD /usr/bin/git -json GO111MODULE 0/x64/bin/node git rev-�� 2431-31846/test---workflow 0/x64/bin/node 0/x64/bin/node t0 -test.v=true(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel go ger.test git rev-�� --show-toplevel ger.test /usr/bin/git --show-toplevel ache/go/1.25.0/xrev-parse /usr/bin/git git(http block)https://api.github.com/repos/actions/checkout/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha 3628241/b001/_pkg_.a GO111MODULE 0/x64/bin/node GOINSECURE GOMOD GOMODCACHE go t-ha�� SameOutput723358405/001/stability-test.md GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha /tmp/go-build3633628241/b422/testutil.test -importcfg /usr/bin/git -s -w -buildmode=exe git rev-�� --show-toplevel -extld=gcc /usr/bin/git GOPATH=$(go env git npm 64/bin/go git(http block)https://api.github.com/repos/actions/checkout/git/ref/tags/v5/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha -bool -buildtags /usr/bin/git -errorsas -ifaceassert -nilfunc git -C /tmp/gh-aw-test-runs/20260224-122332-27950/test-2742578528/.github/workflows rev-parse /usr/bin/git -json GO111MODULE 64/bin/go git(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --show-toplevel sh /usr/bin/git "prettier" --chegit node 64/bin/go git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE 64/bin/go /usr/bin/git(http block)https://api.github.com/repos/actions/github-script/git/ref/tags/v8/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha GOSUMDB GOWORK 64/bin/go GOINSECURE GOMOD GOMODCACHE erignore env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha ck 'scripts/**/*GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE sh(http block)/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE sh(http block)https://api.github.com/repos/actions/setup-go/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha vaScript1322874593/001/test-simp-test.timeout=10m0s GO111MODULE /opt/hostedtoolcache/go/1.25.0/x-test.short=true GOINSECURE GOMOD GOMODCACHE go env runs/20260224-122332-27950/test-3482332339/.github/workflows GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go l GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha(http block)/usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git itattributes-tesgit git /usr/bin/git git(http block)https://api.github.com/repos/actions/setup-node/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha vaScript1322874593/001/test-simp-s GO111MODULE tutil.test GOINSECURE GOMOD GOMODCACHE tutil.test 6336�� runs/20260224-122332-27950/test-3482332339/.github/workflows GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go l GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha --show-toplevel git /usr/bin/git user.name Test User /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git user.email test@example.comrev-parse /usr/bin/git git(http block)/usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha 'origin' 'origin' /usr/bin/git --show-toplevel git /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git --show-toplevel git /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts/usr/bin/gh gh run download 1 --dir test-logs/run-1 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 1 --dir test-logs/run-1 ache/go/1.25.0/x64/pkg/tool/linux_amd64/compile 2754598d0b0b0522ae01fc56a61a64fb6925f41d01207ea2-d 3628241/b414/_pkgit GO111MODULE .cfg git rev-�� --show-toplevel go 64/pkg/tool/linux_amd64/vet k/gh-aw/gh-aw/.ggit GO111MODULE 0/x64/bin/node 64/pkg/tool/linux_amd64/vet(http block)https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts/usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go estl�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 12345 --dir test-logs/run-12345 --package-lock-only /usr/bin/git eutil.test GO111MODULE 64/pkg/tool/linu--get git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/vet 64/bin/go in:/usr/local/bigit .cfg g_.a sed(http block)https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts/usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go estl�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 12346 --dir test-logs/run-12346 --package-lock-only /usr/bin/git -json GO111MODULE /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel go 64/pkg/tool/linux_amd64/compile bin:/usr/local/bgit GO111MODULE /opt/hostedtoolc--get 64/pkg/tool/linuremote.origin.url(http block)https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts/usr/bin/gh gh run download 2 --dir test-logs/run-2 GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 2 --dir test-logs/run-2 ache/go/1.25.0/x64/pkg/tool/linux_amd64/compile 1380a9833877d965c284d7bcd30ee61a4773d07c8950a87c-d 3628241/b413/_pkgit GO111MODULE 3628241/b413=> git rev-�� --show-toplevel go 64/pkg/tool/linux_amd64/link /x64"; export PAgit GO111MODULE 0/x64/bin/node 64/pkg/tool/linux_amd64/link(http block)https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts/usr/bin/gh gh run download 3 --dir test-logs/run-3 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 3 --dir test-logs/run-3 ache/go/1.25.0/x64/pkg/tool/linux_amd64/link /usr/bin/git 2332-27950/test-git GO111MODULE 0/x64/bin/node git rev-�� --show-toplevel JDk5qHbNt3y-M/N3Bu1U9apE1gDEueMOem/8gOT0wxa2oI3YerKPgU5/Gt4DMbGJremote.origin.url 64/pkg/tool/linux_amd64/link orts2003700586/0git GO111MODULE 0/x64/bin/node 64/pkg/tool/linux_amd64/link(http block)https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts/usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 4 --dir test-logs/run-4 go /usr/bin/git 999 GO111MODULE /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel go 64/pkg/tool/linux_amd64/vet k/gh-aw/gh-aw/.g/opt/hostedtoolcache/node/24.13.0/x64/bin/node GO111MODULE 0/x64/bin/node 64/pkg/tool/linux_amd64/vet(http block)https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts/usr/bin/gh gh run download 5 --dir test-logs/run-5 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run download 5 --dir test-logs/run-5 go 8f879cc9a75166c0f4a5c053cf7b0cfeee660e7f5d02a751-d 2332-27950/test-git GO111MODULE /opt/hostedtoolc--show-toplevel git rev-�� --show-toplevel go .test bin 2>/dev/nullgit GO111MODULE 0/x64/bin/node .test(http block)https://api.github.com/repos/github/gh-aw/actions/workflows/usr/bin/gh gh workflow list --json name,state,path GOSUMDB GOWORK 64/bin/go GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/xGO111MODULE env 1386765/b353/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 GOMOD GOMODCACHE go env w3N5/HWXn8eXiiOyGOSUMDB GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 1386765/b402/importcfg(http block)/usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha --show-toplevel go cal/bin/node -json ormatting.go x_amd64/compile git ache�� --show-toplevel nly /usr/bin/git g_.a GO111MODULE ache/go/1.25.0/xadd git(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha --show-toplevel git 0/x64/bin/npm --show-toplevel go /usr/bin/git 0/x64/bin/npm rev-�� --show-toplevel git /usr/bin/git pace:]]*:[[:spacgit go /home/REDACTED/.lo--show-toplevel git(http block)https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999/usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env 848162737/.github/workflows GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha ch go /usr/bin/git -json GO111MODULE 64/pkg/tool/linu/repos/actions/github-script/git/ref/tags/v8 CwosL9U/WoEm3cto--jq rev-�� --show-toplevel 64/pkg/tool/linux_amd64/compile c284d7bcd30ee61a4773d07c8950a87c-d g_.a GO111MODULE ache/go/1.25.0/x64/bin/go git(http block)/usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha --show-toplevel git /usr/bin/git --show-toplevel go x_amd64/compile git 0/x6�� --get remote.origin.url /usr/bin/git --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/nonexistent/repo/actions/runs/12345/usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion WR4t/vrm3hgp6QCOgit GO111MODULE /opt/hostedtoolc--show-toplevel git add initial.txt go /usr/bin/git -json l /opt/hostedtoolcxterm-color git(http block)https://api.github.com/repos/owner/repo/actions/workflows/usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/xGO111MODULE env 1386765/b389/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE b/gh-aw/pkg/envu-c GOMODCACHE go(http block)/usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/xGO111MODULE env 1386765/b392/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 0/x64/bin/npm -json GO111MODULE x_amd64/vet 0/x64/bin/npm rev-�� --show-toplevel x_amd64/vet /usr/bin/git -json GO111MODULE 64/bin/go git(http block)https://api.github.com/repos/owner/repo/contents/file.md/tmp/go-build3633628241/b381/cli.test /tmp/go-build3633628241/b381/cli.test -test.testlogfile=/tmp/go-build3633628241/b381/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/tmp/go-build3950992809/b001/cli.test /tmp/go-build3950992809/b001/cli.test -test.testlogfile=/tmp/go-build3950992809/b001/testlog.txt -test.paniconexit0 -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true /usr/bin/git -json GO111MODULE x_amd64/compile git rev-�� --show-toplevel x_amd64/compile /usr/bin/git -json GO111MODULE 64/bin/go git(http block)https://api.github.com/repos/test-owner/test-repo/actions/secrets/usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name GOSUMDB GOWORK 64/bin/go GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/xGO111MODULE env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name xterm-color go /usr/bin/git -json GO111MODULE 64/bin/go git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE 64/bin/go git(http block)If you need me to access, download, or install something from one of these locations, you can either:
Original prompt
allowed-reposnot accepted inline forassign-to-userandremove-labelssafe outputs (schema gap) #18109✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.