gh aw new safe-outputs are not always valid

[kbreit-insight]

I am trying to create a new workflow and found that selecting certain default safe outputs result in an error.

.github/workflows/test-workflow.md:47:18: error: Multiple schema validation failures:
- 'safe-outputs/create-project' (line 47, col 18): 'create-project': 'oneOf' failed, subschemas 1, 2 matched
- 'safe-outputs' (line 51, col 3): Unknown property: push-repo-memory. Valid fields are: activation-comments, add-comment, add-labels, add-reviewer, allowed-domains, allowed-github-references, assign-milestone, assign-to-agent, assign-to-user, autofix-code-scanning-alert, ...
44 |   hide-comment:
45 |   set-issue-type:
46 |   update-project:
47 |   create-project:
48 |   create-project-status-update:
49 |   autofix-code-scanning-alert:
50 |   mark-pull-request-as-ready-for-review:

✗ Compilation failed: compilation failed
✗ failed to compile workflow
  compilation failed

I've seen this problem with the following safe-outputs:

• create-project
• push-repo-memory

❯ gh extension list
NAME   REPO          VERSION
gh aw  github/gh-aw  v0.62.0

[pelikhan]

@copilot update the "new" implementation to extract the safe output name from the JSON schema itself to ensure they are correct.

[pelikhan]

@copilot add a test that validates the safe output names used "new"

[github-actions]

🍪 Issue Monster has assigned this to Copilot!

I've identified this issue as a good candidate for automated resolution and assigned it to the Copilot coding agent.

The Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Note

🔒 Integrity filtering filtered 3 items

Integrity filtering activated and filtered the following items during workflow execution.
This happens when a tool call accesses a resource that does not meet the required integrity or secrecy level of the workflow.

• issue:[deps] Update safe patch dependencies (1 update) #21935 (issue_read: Resource 'issue:[deps] Update safe patch dependencies (1 update) #21935' has lower integrity than agent requires. The agent cannot read data with integrity below "approved".)
• issue:gh aw new safe-outputs are not always valid #21978 (issue_read: Resource 'issue:gh aw new safe-outputs are not always valid #21978' has lower integrity than agent requires. The agent cannot read data with integrity below "approved".)
• issue:[deps] Update golang.org/x/crypto from v0.48.0 to v0.49.0 #21938 (issue_read: Resource 'issue:[deps] Update golang.org/x/crypto from v0.48.0 to v0.49.0 #21938' has lower integrity than agent requires. The agent cannot read data with integrity below "approved".)

🍪 Om nom nom by Issue Monster · ◷