feat: add cli-proxy feature flag for AWF gh CLI proxy sidecar (firewall v0.25.14) by Copilot · Pull Request #24997 · github/gh-aw

Copilot · 2026-04-07T01:40:07Z

Bump default AWF firewall to v0.25.14 and add cli-proxy / cli-proxy-writable feature flags that wire up the new gh CLI proxy sidecar — secure gh access in the agent container without exposing GITHUB_TOKEN.

Changes

pkg/constants/version_constants.go — DefaultFirewallVersion → v0.25.14; added AWFCliProxyMinVersion = "v0.25.14" minimum version constant for the version gate
pkg/constants/feature_constants.go — two new flags:
- CliProxyFeatureFlag = "cli-proxy"
- CliProxyWritableFeatureFlag = "cli-proxy-writable"
pkg/workflow/awf_helpers.go — BuildAWFArgs() injects after --enable-api-proxy:
- --enable-cli-proxy when cli-proxy: true (gated on awfSupportsCliProxy() version check)
- --cli-proxy-writable when cli-proxy-writable: true (gated on cli-proxy)
- --cli-proxy-policy <json> reusing getDIFCProxyPolicyJSON() when tools.github has min-integrity / allowed-repos
- Added awfSupportsCliProxy() version gate (mirrors awfSupportsExcludeEnv) — skips all cli-proxy flags with a log message when the workflow pins an AWF version older than v0.25.14, preventing unknown-flag startup failures
pkg/workflow/awf_helpers_test.go — 16 unit tests covering all injection/non-injection paths, including pinned-old-version path (TestAWFSupportsCliProxy and updated TestBuildAWFArgsCliProxy)
All 182 workflow lock files recompiled against the new firewall version

Usage

features:
  cli-proxy: true          # read-only gh CLI access via proxy sidecar
  cli-proxy-writable: true # also allow write ops (create issue, merge PR, …)

tools:
  github:
    min-integrity: approved  # forwarded as --cli-proxy-policy guard policy

Note

Workflows that pin network_permissions.firewall.version to a version older than v0.25.14 will have the cli-proxy flags silently skipped to avoid AWF startup failures.

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/2e432b55-8a31-4eb8-ab16-7602b03acea2 Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

…mand injection Agent-Logs-Url: https://github.com/github/gh-aw/sessions/2e432b55-8a31-4eb8-ab16-7602b03acea2 Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot

Pull request overview

Bumps the default Agentic Workflow Firewall (AWF) version to v0.25.14 and introduces cli-proxy / cli-proxy-writable feature flags that add AWF CLI proxy sidecar arguments (including optional guard policy propagation) to enable secure gh CLI usage inside the agent sandbox.

Changes:

Bump default AWF firewall version to v0.25.14.
Add cli-proxy and cli-proxy-writable feature flags and wire them into BuildAWFArgs() (including optional --cli-proxy-policy from tools.github guard fields).
Add unit tests for CLI proxy arg injection paths and recompile workflow lockfiles to the new AWF version.

Show a summary per file

File	Description
pkg/workflow/awf_helpers.go	Injects `--enable-cli-proxy`, `--cli-proxy-writable`, and optional `--cli-proxy-policy` into AWF args based on feature flags.
pkg/workflow/awf_helpers_test.go	Adds unit tests covering CLI proxy arg injection/non-injection cases.
pkg/constants/version_constants.go	Updates `DefaultFirewallVersion` to `v0.25.14`.
pkg/constants/feature_constants.go	Adds `CliProxyFeatureFlag` and `CliProxyWritableFeatureFlag` constants and documentation.
.github/workflows/workflow-health-manager.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/workflow-generator.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/weekly-blog-post-writer.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/test-workflow.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/test-project-url-default.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/test-dispatcher.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/smoke-gemini.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/security-compliance.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/repo-tree-map.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/refiner.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/q.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/pr-triage-agent.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/poem-bot.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/plan.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/notion-issue-summary.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/metrics-collector.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/jsweep.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/issue-triage-agent.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/issue-monster.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/gpclean.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/github-remote-mcp-auth-test.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/firewall.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/example-permissions-warning.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/dictation-prompt.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/dev.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/dependabot-burner.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/daily-team-status.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/daily-secrets-analysis.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/daily-malicious-code-scan.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/craft.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/copilot-token-optimizer.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/contribution-check.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/constraint-solving-potd.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/codex-github-remote-mcp-test.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/code-simplifier.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/changeset.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/brave.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/bot-detection.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/ai-moderator.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.github/workflows/ace-editor.lock.yml	Recompiled lockfile to AWF `v0.25.14` / image tag `0.25.14`.
.changeset/patch-bump-awf-v0-25-14.md	Adds a patch changeset documenting the default AWF version bump.
.changeset/minor-add-cli-proxy-feature-flag.md	Adds a minor changeset documenting the new CLI proxy feature flags and behavior.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 111/188 changed files
Comments generated: 1

Copilot · 2026-04-07T01:57:03Z

pkg/workflow/awf_helpers.go

+	// Enable CLI proxy sidecar when the cli-proxy feature flag is set.
+	// This gives the agent secure gh CLI access without exposing GITHUB_TOKEN
+	// in the agent container (firewall v0.25.14+).
+	if isFeatureEnabled(constants.CliProxyFeatureFlag, config.WorkflowData) {
+		awfArgs = append(awfArgs, "--enable-cli-proxy")


The CLI proxy flags are injected purely based on the feature flags. Workflows can pin an older AWF version via network_permissions.firewall.version; for versions < v0.25.14 these flags will cause AWF startup to fail (unknown flag). Add a version gate similar to awfSupportsExcludeEnv (e.g., awfSupportsCliProxy with a min-version constant) and skip/ log when the pinned version is too old; update tests to cover the pinned-old-version path.

lpcox · 2026-04-07T02:09:54Z

@copilot apply changes based on the comments in this thread

…er AWF versions Agent-Logs-Url: https://github.com/github/gh-aw/sessions/180bd43e-792e-4d72-b6b0-137eacfdd829 Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot · 2026-04-07T02:17:09Z

@copilot apply changes based on the comments in this thread

Done in commit 1adf086. Added AWFCliProxyMinVersion = "v0.25.14" constant and an awfSupportsCliProxy() version gate (same pattern as awfSupportsExcludeEnv). The cli-proxy flags are now skipped with a log message when the pinned firewall version is older than v0.25.14. Added 8 tests for awfSupportsCliProxy and a new test case in TestBuildAWFArgsCliProxy that verifies all three flags are suppressed when pinning v0.25.13.

…#25003) Agent-Logs-Url: https://github.com/github/gh-aw/sessions/45d7425a-e55e-4a76-8049-e58cad7ee0d6 Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/d97ec115-fca7-468f-8455-80e276a712cf Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/7417d3b0-97d5-4b8f-baf1-dff3635cd5d2 Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

) * fix: restore backward compat in assign_to_agent.cjs for standalone tests The main() function was refactored to a handler factory pattern but tests still use the old standalone interface (env vars + direct item processing). Add standalone mode detection when main() is called with no config: - Reads config from env vars (GH_AW_AGENT_DEFAULT, GH_AW_AGENT_MAX_COUNT, etc.) - Processes all assign_to_agent items from GH_AW_AGENT_OUTPUT - Writes summary, sets outputs, calls setFailed on errors Also fix the "Ignore-if-error mode enabled" log message to match tests. Agent-Logs-Url: https://github.com/github/gh-aw/sessions/e00f51ce-33dd-493d-ba64-e13e1ebeb1be Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> * fix: address code review feedback on standalone mode detection Agent-Logs-Url: https://github.com/github/gh-aw/sessions/e00f51ce-33dd-493d-ba64-e13e1ebeb1be Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> * Update; rm -rf / Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> * fix: update assign_to_agent tests to use handler factory pattern Replace `await main()` standalone calls in test evals with a STANDALONE_RUNNER snippet that simulates the safe-output handler manager flow: - build config from env vars - call main(config) to get the handler function - process assign_to_agent items through the handler - write summary, set outputs, call setFailed on errors Also fix the "encounters auth errors" assertion to match the production log message. No changes to assign_to_agent.cjs production code. Agent-Logs-Url: https://github.com/github/gh-aw/sessions/d92459b5-9e9b-40ad-a0c6-108c70f23622 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Initial plan

b57ec46

Copilot AI assigned Copilot and lpcox Apr 7, 2026

Copilot started work on behalf of lpcox April 7, 2026 01:40 View session

Copilot AI linked an issue Apr 7, 2026 that may be closed by this pull request

feat: add cli-proxy feature flag for AWF gh CLI proxy sidecar (firewall v0.25.14) #24996

Closed

Copilot AI and others added 2 commits April 7, 2026 01:46

feat: bump default AWF firewall version to v0.25.14

d50ddfe

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/2e432b55-8a31-4eb8-ab16-7602b03acea2 Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

feat: add cli-proxy and cli-proxy-writable feature flags with AWF com…

461963c

…mand injection Agent-Logs-Url: https://github.com/github/gh-aw/sessions/2e432b55-8a31-4eb8-ab16-7602b03acea2 Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Add cli-proxy feature flag for AWF gh CLI proxy sidecar~~ feat: add cli-proxy feature flag for AWF gh CLI proxy sidecar (firewall v0.25.14) Apr 7, 2026

Copilot AI requested a review from lpcox April 7, 2026 01:51

Copilot finished work on behalf of lpcox April 7, 2026 01:51

pelikhan approved these changes Apr 7, 2026

View reviewed changes

lpcox marked this pull request as ready for review April 7, 2026 01:52

Copilot AI review requested due to automatic review settings April 7, 2026 01:52

Copilot started reviewing on behalf of lpcox April 7, 2026 01:53 View session

Copilot AI reviewed Apr 7, 2026

View reviewed changes

Copilot started work on behalf of lpcox April 7, 2026 02:10 View session

feat: add awfSupportsCliProxy version gate to prevent failures on old…

1adf086

…er AWF versions Agent-Logs-Url: https://github.com/github/gh-aw/sessions/180bd43e-792e-4d72-b6b0-137eacfdd829 Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot finished work on behalf of lpcox April 7, 2026 02:18

Copilot AI and others added 4 commits April 6, 2026 19:44

lpcox merged commit 640038a into main Apr 7, 2026
56 of 57 checks passed

lpcox deleted the copilot/add-cli-proxy-feature-flag branch April 7, 2026 03:54

lpcox mentioned this pull request Apr 7, 2026

Remove cli-proxy-writable feature flag — agent gh CLI should be read-only #25012

Closed

Copilot AI mentioned this pull request Apr 7, 2026

Remove cli-proxy-writable feature flag and add read-only gh CLI prompt for cli-proxy #25013

Merged

github-actions bot mentioned this pull request Apr 7, 2026

Smoke Test: Claude - 24064320241 #25020

Closed

lpcox mentioned this pull request Apr 8, 2026

CLI proxy: start difc-proxy on host, pass --difc-proxy-host to AWF #25365

Closed

Copilot AI mentioned this pull request Apr 8, 2026

CLI proxy: start difc-proxy on host, pass --difc-proxy-host to AWF #25366

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: add cli-proxy feature flag for AWF gh CLI proxy sidecar (firewall v0.25.14)#24997

feat: add cli-proxy feature flag for AWF gh CLI proxy sidecar (firewall v0.25.14)#24997
lpcox merged 8 commits intomainfrom
copilot/add-cli-proxy-feature-flag

Copilot AI commented Apr 7, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Apr 7, 2026

Uh oh!

lpcox commented Apr 7, 2026

Uh oh!

Copilot AI commented Apr 7, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

Copilot AI commented Apr 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Usage

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Copilot AI Apr 7, 2026

Choose a reason for hiding this comment

Uh oh!

lpcox commented Apr 7, 2026

Uh oh!

Copilot AI commented Apr 7, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Copilot AI commented Apr 7, 2026 •

edited

Loading