From ef3ab48bdef35e739c87d708fd6f14e1d123abd4 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 27 Feb 2026 12:53:51 +0000 Subject: [PATCH 1/2] Initial plan From ab4b40a11b5b4b1be7441f07ac23d96a728f4519 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 27 Feb 2026 13:01:03 +0000 Subject: [PATCH 2/2] Add frontmatter snippet and docs link to firewall blocked domains footer message Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> --- actions/setup/js/firewall_blocked_domains.cjs | 13 +++++++++++++ actions/setup/js/firewall_blocked_domains.test.cjs | 4 ++++ 2 files changed, 17 insertions(+) diff --git a/actions/setup/js/firewall_blocked_domains.cjs b/actions/setup/js/firewall_blocked_domains.cjs index b59db45769a..6432ecb1da3 100644 --- a/actions/setup/js/firewall_blocked_domains.cjs +++ b/actions/setup/js/firewall_blocked_domains.cjs @@ -192,6 +192,19 @@ function generateBlockedDomainsSection(blockedDomains) { section += `> - \`${domain}\`\n`; } + section += `>\n`; + section += `> To allow these domains, add them to the \`network.allowed\` list in your workflow frontmatter:\n`; + section += `>\n`; + section += `> \`\`\`yaml\n`; + section += `> network:\n`; + section += `> allowed:\n`; + section += `> - defaults\n`; + for (const domain of blockedDomains) { + section += `> - "${domain}"\n`; + } + section += `> \`\`\`\n`; + section += `>\n`; + section += `> See [Network Configuration](https://github.github.com/gh-aw/reference/network/) for more information.\n`; section += `>\n`; section += `> \n`; diff --git a/actions/setup/js/firewall_blocked_domains.test.cjs b/actions/setup/js/firewall_blocked_domains.test.cjs index 78afee296af..f809374c460 100644 --- a/actions/setup/js/firewall_blocked_domains.test.cjs +++ b/actions/setup/js/firewall_blocked_domains.test.cjs @@ -263,6 +263,8 @@ describe("firewall_blocked_domains.cjs", () => { expect(result).toContain("> ⚠️ Firewall blocked 1 domain"); expect(result).toContain("> - `blocked.example.com`"); expect(result).toContain("> The following domain was blocked by the firewall during workflow execution:"); + expect(result).toContain('> ```yaml\n> network:\n> allowed:\n> - defaults\n> - "blocked.example.com"\n> ```'); + expect(result).toContain("> See [Network Configuration](https://github.github.com/gh-aw/reference/network/) for more information."); }); it("should generate details section for multiple blocked domains", () => { @@ -276,6 +278,8 @@ describe("firewall_blocked_domains.cjs", () => { expect(result).toContain("> - `alpha.example.com`"); expect(result).toContain("> - `beta.example.com`"); expect(result).toContain("> - `gamma.example.com`"); + expect(result).toContain('> ```yaml\n> network:\n> allowed:\n> - defaults\n> - "alpha.example.com"\n> - "beta.example.com"\n> - "gamma.example.com"\n> ```'); + expect(result).toContain("> See [Network Configuration](https://github.github.com/gh-aw/reference/network/) for more information."); }); it("should use correct singular/plural form", () => {