Debug language-support-tester: root cause was unpullable local-only container tag

[Copilot]

Run #22167620379 failed because PR #1089 tagged the locally-built MCP Gateway image as local-awmg:v0.1.4 — a name that has no public registry backing. The agentic workflow framework's "Download container images" step unconditionally pulls all referenced container images from registries before the agent starts, so local-awmg caused a fatal pull failure (3 retries, no recovery).

Fix (PR #1097)

Changed the build tag to the real registry name so the download step can resolve it:

# Before (PR #1089 — broke the workflow)
docker build -t local-awmg:v0.1.4 .
sandbox:
  mcp:
    container: "local-awmg"

# After (PR #1097 — download step can pull ghcr.io/github/gh-aw-mcpg:v0.1.4)
docker build -t ghcr.io/github/gh-aw-mcpg:v0.1.4 .
sandbox:
  mcp:
    container: "ghcr.io/github/gh-aw-mcpg"

The download step runs before the firewall/sandbox is established and always attempts a registry pull for every referenced image — using a local-only tag will always fail here.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• example.com
  • Triggering command: /tmp/go-build2567936660/b279/launcher.test /tmp/go-build2567936660/b279/launcher.test -test.testlogfile=/tmp/go-build2567936660/b279/testlog.txt -test.paniconexit0 -test.timeout=10m0s -test.v=true 64/src/runtime/cgo (dns block)
• invalid-host-that-does-not-exist-12345.com
  • Triggering command: /tmp/go-build2567936660/b264/config.test /tmp/go-build2567936660/b264/config.test -test.testlogfile=/tmp/go-build2567936660/b264/testlog.txt -test.paniconexit0 -test.timeout=10m0s -test.v=true 64/src/runtime/cgo 64/src/math/exp_amd64.s ache/go/1.25.7/x64/pkg/tool/linu-o (dns block)
• nonexistent.local
  • Triggering command: /tmp/go-build2567936660/b279/launcher.test /tmp/go-build2567936660/b279/launcher.test -test.testlogfile=/tmp/go-build2567936660/b279/testlog.txt -test.paniconexit0 -test.timeout=10m0s -test.v=true 64/src/runtime/cgo (dns block)
• slow.example.com
  • Triggering command: /tmp/go-build2567936660/b279/launcher.test /tmp/go-build2567936660/b279/launcher.test -test.testlogfile=/tmp/go-build2567936660/b279/testlog.txt -test.paniconexit0 -test.timeout=10m0s -test.v=true 64/src/runtime/cgo (dns block)
• this-host-does-not-exist-12345.com
  • Triggering command: /tmp/go-build2567936660/b288/mcp.test /tmp/go-build2567936660/b288/mcp.test -test.testlogfile=/tmp/go-build2567936660/b288/testlog.txt -test.paniconexit0 -test.timeout=10m0s -test.v=true 64/src/runtime/cgo 64/src/maps/iter.go ache/go/1.25.7/x64/pkg/tool/linu-o (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.