Fix Security Alert Burndown workflow: Add inline discovery for Dependabot PRs

[Copilot]

The workflow expected a precomputed discovery manifest (./.gh-aw/campaign.discovery.json) but had no step to create it. The project: frontmatter triggered campaign orchestration mode, which injected instructions referencing this missing manifest. The agent succeeded but produced zero safe outputs, triggering failure detection.

Changes

Convert to inline discovery pattern:

• Added GitHub MCP toolsets (repos, issues, pull_requests) for API access
• Added noop safe output (max: 1) to handle zero-result scenarios
• Rewrote prompt with step-by-step inline discovery:
  1. Search for Dependabot JavaScript PRs via GitHub MCP
  2. Call noop if no PRs found
  3. Update project board for discovered PRs (limit: 10)
  4. Report summary

Example search query added to prompt:

repo:githubnext/gh-aw is:pr author:app/dependabot label:dependencies label:javascript is:open

Result: Agent now performs active discovery and always produces safe outputs (either noop or update-project calls), eliminating "no safe outputs" failures.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[agentics] Security Alert Burndown failed</issue_title>
<issue_description>### Workflow Failure

Workflow: Security Alert Burndown
Branch: main
Run URL: https://github.com/githubnext/gh-aw/actions/runs/21412394486

⚠️ No Safe Outputs Generated: The agent job succeeded but did not produce any safe outputs. This typically indicates:

• The safe output server failed to run
• The prompt failed to generate any meaningful result
• The agent should have called noop to explicitly indicate no action was taken

Action Required

Debug this workflow failure using the agentic-workflows agent:

/agent agentic-workflows

When prompted, instruct the agent to debug this workflow failure.

Generated from Security Alert Burndown

• expires on Feb 3, 2026, 8:11 PM UTC

Comments on the Issue (you are @copilot in this section)

• Fixes [agentics] Security Alert Burndown failed #12105

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.