feat: Add issue duplication agent using cache memory#299

Merged

Mossaka merged 5 commits intomainfrom

copilot/add-issue-duplication-agent

Jan 17, 2026

Contributor

Copilot AI commented Jan 17, 2026 •

edited

Loading

Create issue duplication detector workflow with cache memory
Add MCP pagination import for GitHub tools
Improve duplicate detection criteria and pagination guidance
Add bash tool with all commands allowed (bash: ["*"])

Original prompt

Add an issue duplication agent that leverage cache memory and comments on duplicated issues

Custom agent used: create-agentic-workflow
Design agentic workflows using GitHub Agentic Workflows (gh-aw) extension with interactive guidance on triggers, tools, and security best practices.

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.


          Initial plan

af17c3f

Copilot AI assigned Copilot and Mossaka

Copilot stopped work on behalf of Mossaka due to an error

January 17, 2026 09:42

Failed to update job for launch

Copilot AI and others added 3 commits

January 17, 2026 09:45


          feat: add issue duplication detector workflow with cache memory

bb4f21a

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>


          Merge branch 'main' into copilot/add-issue-duplication-agent

7314c96


          docs: improve duplicate detection criteria and pagination guidance

1be30d8

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

github-actions bot commented Jan 17, 2026 •

edited

Loading

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions bot commented Jan 17, 2026 •

edited

Loading

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	77.19%	77.19%	➡️ +0.00%
Statements	77.27%	77.27%	➡️ +0.00%
Functions	77.17%	77.17%	➡️ +0.00%
Branches	69.76%	69.76%	➡️ +0.00%

Coverage comparison generated by scripts/ci/compare-coverage.ts

github-actions bot commented Jan 17, 2026 •

edited

Loading

📰 DEVELOPING STORY: Smoke Copilot reports failed. Our correspondents are investigating the incident...

github-actions bot commented Jan 17, 2026

Smoke Test Results

Last 2 merged PRs:

chore: remove smoke-codex workflow due to missing key #291: chore: remove smoke-codex workflow due to missing key
ci: add agentic documentation preview workflow with Playwright #246: ci: add agentic documentation preview workflow with Playwright

Tests:

✅ GitHub MCP (retrieved PRs)
✅ Playwright (page title: "GitHub · Change is constant. GitHub keeps you ahead. · GitHub")
✅ File writing (created /tmp/gh-aw/agent/smoke-test-claude-21092351052.txt)
✅ Bash tool (verified file contents)

Status: PASS

AI generated by Smoke Claude

github-actions bot added the smoke-claude label

Mossaka approved these changes

View reviewed changes

.github/workflows/issue-duplication-detector.md

+                - shared/mcp-pagination.md
+              tools:
+                github:
+                  toolsets: [issues, repos, search]

Collaborator

Mossaka Jan 17, 2026

@copilot allow allbash tools

Contributor Author

Copilot AI Jan 17, 2026

Added bash: ["*"] to allow all bash commands in commit 95967a9.

Copilot started work on behalf of Mossaka

January 17, 2026 20:15


          feat: add bash tool with all commands allowed

95967a9

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

Copilot AI requested a review from Mossaka

January 17, 2026 20:17

Copilot finished work on behalf of Mossaka

January 17, 2026 20:17

Mossaka marked this pull request as ready for review

January 17, 2026 20:23

github-advanced-security bot found potential problems

View reviewed changes

.github/workflows/issue-duplication-detector.lock.yml

+                    comment_repo: ""
+                  steps:
+                    - name: Setup Scripts
+                      uses: githubnext/gh-aw/actions/setup@v0.36.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Issue Duplication Detector' step

uses 'githubnext/gh-aw/actions/setup' with ref 'v0.36.0', not a pinned commit hash

.github/workflows/issue-duplication-detector.lock.yml

+                    output_types: ${{ steps.collect_output.outputs.output_types }}
+                  steps:
+                    - name: Setup Scripts
+                      uses: githubnext/gh-aw/actions/setup@v0.36.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Issue Duplication Detector' step

uses 'githubnext/gh-aw/actions/setup' with ref 'v0.36.0', not a pinned commit hash

.github/workflows/issue-duplication-detector.lock.yml

+                    total_count: ${{ steps.missing_tool.outputs.total_count }}
+                  steps:
+                    - name: Setup Scripts
+                      uses: githubnext/gh-aw/actions/setup@v0.36.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Issue Duplication Detector' step

uses 'githubnext/gh-aw/actions/setup' with ref 'v0.36.0', not a pinned commit hash

.github/workflows/issue-duplication-detector.lock.yml

+                    success: ${{ steps.parse_results.outputs.success }}
+                  steps:
+                    - name: Setup Scripts
+                      uses: githubnext/gh-aw/actions/setup@v0.36.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Issue Duplication Detector' step

uses 'githubnext/gh-aw/actions/setup' with ref 'v0.36.0', not a pinned commit hash

.github/workflows/issue-duplication-detector.lock.yml

+                    activated: ${{ steps.check_membership.outputs.is_team_member == 'true' }}
+                  steps:
+                    - name: Setup Scripts
+                      uses: githubnext/gh-aw/actions/setup@v0.36.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Issue Duplication Detector' step

uses 'githubnext/gh-aw/actions/setup' with ref 'v0.36.0', not a pinned commit hash

.github/workflows/issue-duplication-detector.lock.yml

+                    process_safe_outputs_temporary_id_map: ${{ steps.process_safe_outputs.outputs.temporary_id_map }}
+                  steps:
+                    - name: Setup Scripts
+                      uses: githubnext/gh-aw/actions/setup@v0.36.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Issue Duplication Detector' step

uses 'githubnext/gh-aw/actions/setup' with ref 'v0.36.0', not a pinned commit hash

.github/workflows/issue-duplication-detector.lock.yml

+                  permissions: {}
+                  steps:
+                    - name: Setup Scripts
+                      uses: githubnext/gh-aw/actions/setup@v0.36.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Issue Duplication Detector' step

uses 'githubnext/gh-aw/actions/setup' with ref 'v0.36.0', not a pinned commit hash

github-actions bot commented Jan 17, 2026

⚠️ Security Review: Critical Finding

I've identified a significant security concern in this PR that weakens the firewall's security posture.

Issue: Unrestricted Bash Command Execution

File: .github/workflows/issue-duplication-detector.md (lines 17-18)

bash:
  - "*"

This configuration grants the AI agent unrestricted bash command execution within the firewall container. The bash: ["*"] setting compiles to --allow-all-tools in the GitHub Copilot CLI invocation (line 770 of the compiled .lock.yml), permitting execution of ANY bash command without restrictions.

Security Impact

Bypasses command restrictions: While the firewall controls network egress, unrestricted bash access allows:
- Arbitrary command execution that could probe for vulnerabilities
- Potential iptables manipulation (if NET_ADMIN capability is accessible)
- Access to sensitive files within the container
- Creation of reverse shells or exfiltration mechanisms
Expands attack surface: Unrestricted bash commands significantly expand the attack surface beyond network operations to include file system manipulation, process spawning, and potential container escape attempts.
Contradicts security model: The AWF's security model is based on restricting agent capabilities. Using bash: ["*"] defeats this purpose and creates a large trust boundary.

Comparison with Repository Patterns

Other workflows in this repository use restricted bash command allowlists:

bash:
  - cat
  - ls
  - grep
  - find

This PR deviates from the established security pattern.

Recommended Mitigation

Option 1 (Recommended): Restrict bash commands to only what's needed:

bash:
  - cat
  - ls
  - grep
  - find
  - jq

Option 2: Remove bash tool entirely if not required - the agent has GitHub MCP tools for issue operations.

Option 3: If unrestricted bash is genuinely necessary, document the security justification and add compensating controls.

Suggested Action

Please update the bash tool configuration to use a restricted allowlist before merging this PR.

AI generated by Security Guard

Mossaka changed the title ~~[WIP] Add issue duplication agent using cache memory~~ feat: Add issue duplication agent using cache memory

Mossaka merged commit d20b34c into main

34 of 37 checks passed

Mossaka deleted the copilot/add-issue-duplication-agent branch

January 17, 2026 20:32

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels