fix: checkout dev mode actions to /tmp/gh-aw/dev-actions (outside workspace) to prevent override#23408
Closed
fix: checkout dev mode actions to /tmp/gh-aw/dev-actions (outside workspace) to prevent override#23408
/tmp/gh-aw/dev-actions (outside workspace) to prevent override#23408Conversation
… override In dev mode, the compiler now checks out github/gh-aw to a dedicated `_gh-aw` subdirectory (instead of the workspace root) via `path: _gh-aw`. This prevents subsequent checkouts to the workspace root from overwriting the actions/ directory, which caused the post-job cleanup to fail with: "Can't find 'action.yml' under '.../actions/setup'" All local action references in dev mode now use the safe checkout path prefix (e.g., `./_gh-aw/actions/setup` instead of `./actions/setup`). The repo_memory restore step and maintenance workflow are updated consistently. All 178 lock.yml files recompiled, golden files updated. Agent-Logs-Url: https://github.com/github/gh-aw/sessions/04e68266-33c9-4510-b995-a58c9b23019e Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot created this pull request from a session on behalf of
pelikhan
March 29, 2026 01:51
View session
Collaborator
|
@copilot pick a folder outside the checkout to avoid commiting the files |
…kspace) Move the dev mode actions checkout from `_gh-aw` (inside workspace) to `/tmp/gh-aw/dev-actions` (outside workspace) so the files are never inside the caller's git repository and cannot be accidentally committed. The setup action is now invoked via bash script (same pattern as script mode) rather than `uses:`, which requires no workspace-relative path: - Before: `uses: ./_gh-aw/actions/setup` - After: `bash /tmp/gh-aw/dev-actions/actions/setup/setup.sh` The "Restore actions folder" step in repo_memory is removed since there is no longer a `uses:` post-job hook that needs to find action.yml. Agent-Logs-Url: https://github.com/github/gh-aw/sessions/4ab345f8-9077-4954-b850-287f8b09ffca Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Contributor
Author
Done in b2a4a2f. The checkout now targets Since - name: Checkout actions folder
uses: actions/checkout@...
with:
repository: github/gh-aw
path: /tmp/gh-aw/dev-actions # ← outside workspace
- name: Setup Scripts
run: bash /tmp/gh-aw/dev-actions/actions/setup/setup.shThe "Restore actions folder" step in the repo-memory job was also removed since there's no longer a Warning Firewall rules blocked me from connecting to one or more addresses (expand for details)I tried to connect to the following addresses, but was blocked by firewall rules:
If you need me to access, download, or install something from one of these locations, you can either:
|
Copilot
AI
changed the title
fix: checkout dev mode actions to safe
fix: checkout dev mode actions to Mar 29, 2026
_gh-aw subdirectory to prevent override/tmp/gh-aw/dev-actions (outside workspace) to prevent override
Closed
IAMJehovah1
approved these changes
Mar 29, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
In dev mode,
github/gh-awwas checked out to the workspace root. Any subsequent checkout to the workspace root (e.g. checking out a target repo or PR branch) would overwriteactions/setup, causing the runner post-job cleanup to fail:Can't find 'action.yml' under '.../actions/setup'.Changes
compiler_yaml_helpers.go: AddeddevModeActionsCheckoutPath = "/tmp/gh-aw/dev-actions"constant; dev mode checkout now targets this absolute path outside$GITHUB_WORKSPACE, so the files are never inside the caller's git repository and cannot be accidentally committedcompiler_yaml_helpers.go:generateSetupStepnow runssetup.shvia bash in dev mode (same pattern as script mode), removing the need for a workspace-relativeuses:reference entirelyaction_reference.go: Dev mode reverted to return the original local path placeholder sinceuses:is no longer involved for the setup action in dev moderepo_memory.go: Removed the "Restore actions folder" step — it existed to keepaction.ymlfindable for the post-job hook, which is no longer needed since dev mode uses bash execution instead of auses:actionmaintenance_workflow.go: Dev mode setup updated to use bash execution matching the new approach.lock.ymlfiles recompiled; wasm golden files updatedBefore:
After:
✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.