Document dispatch-workflow safe output

[Copilot]

The dispatch-workflow safe output type was undocumented. Added comprehensive reference documentation to docs/src/content/docs/reference/safe-outputs.md.

Changes

• Table of Contents: Added entry under "Security & Agent Tasks" section
• Configuration: Both shorthand and detailed syntax with workflows list and max limit (default: 1, max: 3)
• Validation Rules: Workflow existence, workflow_dispatch trigger requirement, self-reference prevention, compile-time file resolution
• Runtime Behavior: Agent output format, automatic type conversion, 5-second rate limiting between dispatches
• Security: Same-repo only, allowlist enforcement, compile-time validation
• Use Cases: Campaign orchestration and multi-stage pipeline examples

Example Configuration

safe-outputs:
  dispatch-workflow:
    workflows: [seeder-worker, processor-worker]
    max: 2

Agent output:

{
  "type": "dispatch_workflow",
  "workflow_name": "worker-workflow",
  "inputs": {
    "campaign_id": "bootstrap-123"
  }
}

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• telemetry.astro.build
  • Triggering command: /opt/hostedtoolcache/node/24.13.0/x64/bin/node node /home/REDACTED/work/gh-aw/gh-aw/docs/node_modules/.bin/astro build grep -l flow ode_modules/tunnel/README.md ache/go/1.25.0/x64/bin/grep flow ci/docs/docs/api-c /usr/sbin/grep grep -l flow d-safe-output/SKILL.md /usr/sbin/grep flow md ep grep (dns block)
  • Triggering command: /opt/hostedtoolcache/node/24.13.0/x64/bin/node node /home/REDACTED/work/gh-aw/gh-aw/docs/node_modules/.bin/astro preview grep -l flow 3+pelikhan@users.noreply.github.com> bin/grep flow odules/@octokit/rev-parse ndor/bin/grep grep -l es/index.html tions/setup/js/node_modules/picomatch/README.md ndor/bin/grep flow up/README.md cal/bin/grep grep (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Documented dispatch_workflow safe outout

Custom agent used: technical-doc-writer
AI technical documentation writer for GitHub Actions library using GitHub Docs voice

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.