fix: remove restrictive bash allowlist from go-logger workflow

[lpcox]

Problem

The Go Logger Enhancement workflow failed (#3826) because the AWF sandbox blocked the agent's go build ./... command. The workflow had a restrictive bash allowlist that only permitted go build -o awmg, so the agent reported itself as incomplete, triggering failure handling.

Root cause

The go-logger.md workflow used an explicit bash command allowlist:

tools:
  bash:
    - "go build -o awmg"
    - "go test ./..."
    - ...

The Copilot agent tried go build ./... (a valid Go build command) which didn't match the allowlist exactly, so the AWF rejected it.

Fix

1. Replace restrictive bash allowlist with bash: true — The AWF sandbox already provides security, so explicit command restrictions are unnecessary (per gh-aw best practices)
2. Add go ecosystem identifier to network.allowed — Ensures Go module proxy access for builds
3. Recompile lock file — Updated go-logger.lock.yml to reflect changes

Verification

• gh aw compile go-logger succeeds
• make agent-finished passes all checks

Closes #3826

[Copilot]

Pull request overview

Adjusts the Go Logger Enhancement agentic workflow to avoid AWF sandbox rejections caused by an overly strict bash command allowlist, aligning the workflow with the typical “unrestricted bash within sandbox + network allowlisting” pattern used elsewhere in this repo.

Changes:

• Expand network.allowed to include the go ecosystem so Go module/proxy access works during builds.
• Replace the explicit bash command allowlist with bash: true to prevent valid Go build/test invocations from being blocked.
• Recompile the workflow lock file to reflect the updated tool/network configuration.

Show a summary per file

File	Description
.github/workflows/go-logger.md	Enables go network access and removes the restrictive bash allowlist by switching to bash: true.
.github/workflows/go-logger.lock.yml	Updates compiled lock output (allowed domains + Copilot CLI tool allowances) to match the workflow changes.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 2/2 changed files
• Comments generated: 0