fix: cross-repo create-pull-request checkout ignores triggering branch ref#28395
fix: cross-repo create-pull-request checkout ignores triggering branch ref#28395
Conversation
…thub.ref_name
When target-repo is set on create-pull-request, the safe_outputs job
checkout step now uses a cross-repo-safe ref expression that omits
github.ref_name. This prevents checkout failures when the workflow is
dispatched from a branch that does not exist in the target repository.
The new fallback for cross-repo checkouts is:
${{ github.base_ref || github.event.pull_request.base.ref || github.event.repository.default_branch }}
The original expression (including github.ref_name) is still used when
no target-repo is configured (same-repo case).
Closes #<issue>
Agent-Logs-Url: https://github.com/github/gh-aw/sessions/69ba08e1-f5ca-4ff6-a3f0-6174bd25a2c2
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
…d improve comment Agent-Logs-Url: https://github.com/github/gh-aw/sessions/69ba08e1-f5ca-4ff6-a3f0-6174bd25a2c2 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
|
Hey This PR looks well-scoped, includes tests, has a clear description, and follows the core team contribution process. It's ready for maintainer review. 🟢
|
There was a problem hiding this comment.
Pull request overview
Fixes cross-repo create-pull-request checkouts by avoiding github.ref_name (which can reference a branch that only exists in the triggering repo) and instead using a cross-repo-safe base-branch fallback expression.
Changes:
- Update safe-outputs checkout ref selection to use a cross-repo fallback when
target-repo(or trial repo) is set. - Add/extend unit tests to assert the new cross-repo ref behavior (including ensuring
github.ref_nameis not used). - Recompile the cross-repo smoke workflow lockfile to reflect the new ref expression.
Show a summary per file
| File | Description |
|---|---|
| pkg/workflow/compiler_safe_outputs_steps.go | Introduces a cross-repo-safe checkout ref fallback expression when checking out a target repo. |
| pkg/workflow/compiler_safe_outputs_steps_test.go | Adds coverage for cross-repo ref selection and a negative assertion to prevent regressions using github.ref_name. |
| .github/workflows/smoke-create-cross-repo-pr.lock.yml | Updates generated workflow output to match the new cross-repo checkout ref expression. |
| .changeset/patch-fix-cross-repo-checkout-ref.md | Adds a patch changeset describing the fix. |
Copilot's findings
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 4/4 changed files
- Comments generated: 0
🧪 Test Quality Sentinel ReportTest Quality Score: 80/100✅ Excellent test quality
Test Classification DetailsView all 4 test rows
Flagged Tests — Requires Review
50 lines were added to the test file vs. 8 lines in the production file (ratio ~6.25:1), exceeding the 2:1 threshold. This is largely unavoidable here — a small targeted fix benefits from multiple scenario tests (no-base-branch, trial-mode, explicit-base-branch). The table-driven pattern is the correct approach and the tests are high quality; this is a mechanical flag, not a genuine concern. No other issues detected. All assertions include descriptive messages. Build tag Language SupportTests analyzed:
Verdict
📖 Understanding Test ClassificationsDesign Tests (High Value) verify what the system does:
Implementation Tests (Low Value) verify how the system does it:
Goal: Shift toward tests that describe the system's behavioral contract — the promises it makes to its users and collaborators. References: §24929126229
|
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
✅ Test Quality Sentinel: 80/100. Test quality is excellent — 0% of new tests are implementation tests (threshold: 30%). The four table-driven rows directly enforce the behavioral contract for the cross-repo checkout fix, including a negative assertion that prevents regression on the github.ref_name bug.
When
create-pull-requestusestarget-repo, thesafe_outputscheckout step fell through togithub.ref_namein its ref expression. Forworkflow_dispatchfrom a non-default branch, this resolves to a branch that doesn't exist in the target repo, causing a git fetch failure.Changes
compiler_safe_outputs_steps.go: WhentargetRepoSlug != "", use a cross-repo-safe ref fallback that omitsgithub.ref_name:base-branchtarget-reposet (cross-repo)${{ github.base_ref || github.event.pull_request.base.ref || github.event.repository.default_branch }}target-repo)${{ github.base_ref || github.event.pull_request.base.ref || github.ref_name || github.event.repository.default_branch }}(unchanged)compiler_safe_outputs_steps_test.go: Added test cases covering cross-repo checkout ref selection (nobase-branch, trial mode, explicitbase-branchoverride).smoke-create-cross-repo-pr.lock.yml: Recompiled — now emits the safe cross-repo ref expression.Warning
Firewall rules blocked me from connecting to one or more addresses (expand for details)
I tried to connect to the following addresses, but was blocked by firewall rules:
https://api.github.com/graphql/usr/bin/gh gh repo view --json owner,name --jq .owner.login + "/" + .name x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile 2712�� 2184651/b148/_pkg_.a g/typeutil/convert.go k GOINSECURE ntio/asm/cpu/cpuapi GOMODCACHE ache/go/1.25.8/x--jq(http block)/usr/bin/gh gh repo view owner/repo 2712�� tzQPU-Nb0 GO111MODULE k GOINSECURE /gc GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linuremote.origin.url sRem�� 2184651/b188/_pkg_.a rg/x/text@v0.36.0/feature/plural-c=4 ache/go/1.25.8/x64/pkg/tool/linu-nolocalimports GOINSECURE fips140/edwards2config GOMODCACHE ache/go/1.25.8/x^remote\..*\.gh-resolved$(http block)/usr/bin/gh gh repo view owner/repo env g_.a GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile ranc�� P82kiP9ch 121B/QAbEoAud7kS1BN8F121B ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile GOINSECURE ntio/asm/cpu/armrev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile(http block)https://api.github.com/orgs/test-owner/actions/secrets/usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name -json cpgodebug/mcpgodebug.go 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go /pre�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1/usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linux_amd64/link /usr/bin/git rdian.md NG8R67gve x_amd64/vet git rev-�� --show-toplevel x_amd64/vet /usr/bin/git eutil.test GO111MODULE ortcfg.link git(http block)/usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv user.email test@example.com /usr/bin/git mLsRemoteWithReagit mLsRemoteWithRearev-parse 64/bin/go git remo�� remove upstream /usr/bin/git -json GO111MODULE piler}} git(http block)https://api.github.com/repos/actions/checkout/git/ref/tags/v3/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv GOMODCACHE x_amd64/cgo /usr/bin/git -json GO111MODULE x_amd64/compile git rev-�� --show-toplevel x_amd64/compile /usr/bin/git -json GO111MODULE x_amd64/compile git(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv for-each-ref --format=%(objectname) /usr/bin/git -json GO111MODULE de git -C /tmp/TestGuardPolicyBlockedUsersCommaSeparatedCompiledOutput3168265263/001 rev-parse /usr/bin/git -json GO111MODULE 64/bin/go git(http block)https://api.github.com/repos/actions/checkout/git/ref/tags/v5/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv ons/secrets GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE 2184651/b011/sysrev-parse ache/go/1.25.8/x--show-toplevel ache/go/1.25.8/x64/pkg/tool/linuremote2 ortc�� -json stmain.go 1/x64/bin/node GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv view owner/test-repo /usr/bin/git 2184651/b108/_pktr rg/x/oauth2@v0.3\n ache/go/1.25.8/x: git rev-�� --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile /usr/bin/git 3911-33781/test-git 4ACQ/f02Eva1ttQPrev-parse 2184651/b161=> git(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel git-receive-pack /usr/bin/git -pack /home/REDACTED/go/rev-parse ache/node/24.14.--show-toplevel git rev-�� --show-toplevel git /usr/bin/git k/gh-aw/gh-aw/.ggit rev-parse /tmp/go-build327--show-toplevel git(http block)https://api.github.com/repos/actions/checkout/git/ref/tags/v6/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv ons-test3459446398 go /usr/bin/git l GO111MODULE 64/bin/go git conf�� mpleWorkflow101132907/001 remote.origin.url /usr/bin/infocmp 01 GO111MODULE x_amd64/asm infocmp(http block)/usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv runs/20260425-044251-59379/test-2912862178 -buildtags /usr/bin/git -errorsas -ifaceassert -nilfunc git clon�� /tmp/TestParseDefaultBranchFromLsRemoteWithRealGitmain_branch278428065/001 /tmp/TestParseDefaultBranchFromLsRemoteWithRealGitmain_branch278428065/002/work /usr/bin/git with-tools.md GO111MODULE 64/bin/go git(http block)https://api.github.com/repos/actions/github-script/git/ref/tags/v8/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv --show-toplevel 1272521/b395/actionpins.test /usr/bin/git 1296223858 EuIi/QLX65JRSUvp/tmp/gh-aw-test-runs/20260425-043927-36310/test-patch-priority-29785�� es.test git rev-�� --show-toplevel es.test /usr/bin/git 2184651/b203/impgit(http block)/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv --show-toplevel go(http block)https://api.github.com/repos/actions/github-script/git/ref/tags/v9/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE ucEDW57/fxNYHBu8-o GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/asm GOINSECURE GOMOD GOMODCACHE x_amd64/asm env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile(http block)https://api.github.com/repos/actions/setup-go/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linuremote.origin.url /usr/bin/infocmp add-source-path-git GO111MODULE 64/pkg/tool/linu--show-toplevel infocmp -1 xterm-color ylQP4Z8/vCNYLdc7Test User /usr/bin/infocmp g_.a yVIFwLdjv 64/pkg/tool/linu--show-toplevel infocmp(http block)/usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/vet /usr/lib/git-core/git -json GO111MODULE 64/bin/go /usr/lib/git-core/git main�� run --auto /usr/bin/git --detach mLsRemoteWithRearev-parse 64/bin/node git(http block)https://api.github.com/repos/actions/setup-node/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 remote bject.type] | @tsv -json GO111MODULE 64/bin/go git -C /tmp/gh-aw-test-runs/20260425-043911-33781/test-448746410 remote /usr/bin/gh -json GO111MODULE x_amd64/asm gh(http block)/usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv user.email test@example.com /usr/bin/gh add-source-path-git GO111MODULE x_amd64/link gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts /tmp/go-build3271272521/b472/scripts.test .artifacts[].namgit 8kq6Gg-gh 64/pkg/tool/linu--show-toplevel /tmp/go-build3271272521/b472/scripts.test(http block)/usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv -bool -buildtags /opt/hostedtoolcache/node/24.14.1/x64/bin/node -errorsas -ifaceassert -nilfunc node /tmp�� /tmp/TestHashConsistency_WithImports2696627/001/main.md(http block)https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4/usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /tmp/go-build3271272521/b444/stats.test -importcfg ache/node/24.14.1/x64/bin/node -s -w -buildmode=exe ache/node/24.14.1/x64/bin/node 3414�� uts.version config /usr/bin/git remote.origin.urgit GO111MODULE x_amd64/asm git(http block)/usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv licyBlockedUsersCommaSeparatedCompiledOutput3168265263/001 log /usr/bin/gh -n1 --format=format:rev-parse --end-of-options--show-toplevel gh api UpdateDiscussionFieldEnforcement2550014805/001 --jq /usr/lib/git-core/git l GO111MODULE 64/bin/go /usr/lib/git-core/git(http block)https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b/usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv user.name ings.cjs odules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin/git 5355a580..full-m/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/compile st/suppress-warn-o tions/node_modul/tmp/go-build84285072/b001/_pkg_.a forks.js bran�� -M st/suppress-warnmain _modules/.bin/gi-lang=go1.25 -M full mode test _modules/.bin/gi--require st/dist/workers//home/REDACTED/work/gh-aw/gh-aw/actions/setup/js/node_modules/vitest/suppress-warnings.cjs(http block)/usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv HEAD st/dist/workers/forks.js $name) { hasDiscussionsEnabled } } --bare gin/full-mode-brcommit k/gh-aw/gh-aw/ac-m git diff�� --binary(http block)/usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv . tions/setup/js/node_modules/vite--stdout bin/git /tmp/bare-increm/opt/hostedtoolcache/node/24.14.1/x64/bin/node gin/full-mode-br--experimental-import-meta-resolve ode-gyp-bin/git 8lgowFM/aXL3tOko/home/REDACTED/work/gh-aw/gh-aw/actions/setup/js/node_modules/vitest/suppress-warnings.cjs diff�� --binary st/suppress-warn--conditions k/node_modules/.development README.md ode_modules/viteapi ache/node/24.14.graphql st/dist/workers/-f(http block)https://api.github.com/repos/github/gh-aw/usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch .go test@example.com 1/x64/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin/go e_modules/.bin/ggit git e7 git rev-�� -cwd.go ache/node/24.14.test@example.com ck.yml --is-ancestor k/gh-aw/gh-aw/ac-C es/.bin/git git(http block)/usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch . /opt/hostedtoolc--output=/tmp/git-patch-utils-O0yEy5/.diffsize.tmp /opt/hostedtoolcache/node/24.14.1/x64/bin/node r/work/gh-aw/gh-git /home/REDACTED/wor-C tions/setup/js/n/home/REDACTED/work/gh-aw/gh-aw /opt/hostedtoolcshow /tmp�� k/gh-aw/gh-aw git cleanup.lock.yml feature && echo git forks.js db6b4105e283eae2/home/REDACTED/work/gh-aw/gh-aw/.github/workflows go(http block)/usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch ache/go/1.25.8/x--show-toplevel git /usr/bin/git --show-toplevel go /usr/bin/git git rev-�� --show-toplevel git repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } --show-toplevel go /usr/bin/git git(http block)https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv user.name Test User /usr/bin/git g_.a GO111MODULE 64/pkg/tool/linu--show-toplevel git rev-��(http block)/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/vet /usr/bin/git -json GO111MODULE 64/bin/go git rev-�� --show-toplevel go /usr/bin/git 2484/001/stabiligit GO111MODULE tions/setup/node--show-toplevel git(http block)https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw/.github/workflows/agentic-observability-kit.md -buildtags /opt/hostedtoolcache/node/24.14.1/x64/bin/node -errorsas -ifaceassert -nilfunc node /tmp�� s/test.md -tests ache/node/24.14.1/x64/bin/node tem ]; then /usrgit GO111MODULE x_amd64/compile ache/node/24.14.1/x64/bin/node(http block)/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv --noprofile(http block)https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv :latest go /tmp/go-build3271272521/b447/stringutil.test -json .go 64/bin/go /tmp/go-build3271272521/b447/stringutil.test -tes�� -test.paniconexit0 s/test.md ache/node/24.14.1/x64/bin/node -test.timeout=10git -test.run=^Test -test.short=true--show-toplevel ache/node/24.14.1/x64/bin/node(http block)/usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv y go /opt/hostedtoolcache/node/24.14.1/x64/bin/node -json GO111MODULE 64/bin/go node /tmp�� /tmp/TestHashConsistency_GoAndJavaScript1725162127/001/test-inlined-imports-enabled-with-env-temgit go(http block)https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name xpQFH7LFx x_amd64/compile GOINSECURE go-sdk/internal/rev-parse GOMODCACHE x_amd64/compile env g_.a GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile GOINSECURE %H %ct %D(http block)/usr/bin/gh gh run download 1 --dir test-logs/run-1 ortcfg 64/pkg/tool/linux_amd64/vet GOINSECURE util 64/src/reflect/a--show-toplevel 64/pkg/tool/linux_amd64/vet env JwsSqW7R0 GO111MODULE ache/go/1.25.8/x64/pkg/tool/linu-test.short=true GOINSECURE 2184651/b015/ GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linuremote.origin.url(http block)/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name origin /usr/bin/git -json GO111MODULE 64/bin/go git -C /tmp/TestGuardPolicyBlockedUsersCommaSeparatedCompiledOutput3168265263/001 remote /opt/hostedtoolcache/node/24.14.1/x64/bin/node -json GO111MODULE 64/bin/go /opt/hostedtoolcache/node/24.14.1/x64/bin/node(http block)https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name 8kq6Gg-gh 64/pkg/tool/linux_amd64/link GOINSECURE GOMOD GOMODCACHE dI/VlqCrFGhKv_vuXFDo5AA/4Ab4WdaL-importcfg env util.test o x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile(http block)/usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE /opt/hostedtoolcache/go/1.25.8/x64/bin/go GOINSECURE GOMOD abis go env b/workflows Ffa_H-Eee ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xremote.origin.url(http block)/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name l /usr/bin/git -json GO111MODULE /node git -C /tmp/gh-aw-test-runs/20260425-044251-59379/test-1236229795/.github/workflows config /usr/bin/git remote.origin.urgit GO111MODULE 64/bin/go git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name l_test.go x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env g_.a 1iP8YSgUm x_amd64/compile GOINSECURE %H %ct %D(http block)/usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/link GOINSECURE /norm abis 64/src/reflect/asm_wasm.s env b/workflows aTWjRYknE x_amd64/vet GOINSECURE 8f0CZzdoJ9ZMw/40rev-parse GOMODCACHE x_amd64/vet(http block)/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name(http block)https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name dtNyzpRaw x_amd64/link GOINSECURE v3 GOMODCACHE x_amd64/link env (.*\)$/\2/p GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile wc -c < gh-aw.wagit GOMOD GOMODCACHE Fr/vLW-tx2f42dcm-MlvCPy/t6M8s7Cmremote.origin.url(http block)/usr/bin/gh gh run download 2 --dir test-logs/run-2 bt7zDc9ZF ache/go/1.25.8/x64/pkg/tool/linu-importcfg GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-importcfg env m9YkzyPpA GO111MODULE ck GOINSECURE(http block)/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name --jq /usr/bin/git -json GO111MODULE 64/bin/go git -C /tmp/TestGuardPolicyTrustedUsersCompiledOutput3525032875/001 config /usr/bin/git remote.origin.urgh GO111MODULE 64/bin/go git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name JytyNgNV_ ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile GOINSECURE go-sdk/internal/rev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-buildtags env /\1/p GO111MODULE ache/go/1.25.8/x64/pkg/tool/linu-nilfunc GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xtest@example.com(http block)/usr/bin/gh gh run download 3 --dir test-logs/run-3 cuiX4cYAj 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 5072/001/stability-test.md GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile GOINSECURE 2184651/b012/ GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile(http block)/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name git-upload-pack '/tmp/TestParseDefaultBranchFromLsRemoteWithRealGitbranch_with_hyphen475182593/0rev-parse /usr/bin/git -json GO111MODULE 64/bin/go git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE 64/bin/go git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name dAR9m3zY_ ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-trimpath env 5072/001/stability-test.md eJpt1zLU2 ache/go/1.25.8/x64/pkg/tool/linu-lang=go1.25 GOINSECURE er GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linuremote.origin.url(http block)/usr/bin/gh gh run download 4 --dir test-logs/run-4 bBouUBHdz 64/pkg/tool/linux_amd64/link GOINSECURE r GOMODCACHE 64/pkg/tool/linux_amd64/link env .test GO111MODULE ortcfg.link GOINSECURE 2184651/b012/ GOMODCACHE HoC7D-KEVsjbUjlfJz/x8PM9FNe4M7vYTest User(http block)/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name go /usr/bin/git -json GO111MODULE 64/bin/go git -C /tmp/TestGuardPolicyTrustedUsersCompiledOutput3525032875/001 rev-parse /usr/bin/git -json GO111MODULE 64/bin/go git(http block)https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name B-Au8vNkW x_amd64/vet GOINSECURE go-sdk/internal/rev-parse GOMODCACHE x_amd64/vet env sole.test GO111MODULE ortcfg.link GOINSECURE GOMOD GOMODCACHE 3RI-OUvcyJlIpS7G73/L1Wa7eeJiw1netest@example.com(http block)/usr/bin/gh gh run download 5 --dir test-logs/run-5 PcfUGjA_S 64/pkg/tool/linux_amd64/compile GOINSECURE g GOMODCACHE 64/pkg/tool/linux_amd64/compile env 5072/001/stability-test.md GO111MODULE ache/go/1.25.8/x64/pkg/tool/linu-nilfunc GOINSECURE rand GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-tests(http block)/usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name go /opt/hostedtoolcache/node/24.14.1/x64/bin/node -json GO111MODULE 64/bin/go /opt/hostedtoolcache/node/24.14.1/x64/bin/node /tmp�� github.actor go /usr/bin/gh -json GO111MODULE 64/bin/go gh(http block)https://api.github.com/repos/github/gh-aw/actions/workflows/usr/bin/gh gh workflow list --json name,state,path -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile(http block)/usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 GOMOD GOMODCACHE x_amd64/asm env -json GO111MODULE x_amd64/asm GOINSECURE GOMOD GOMODCACHE x_amd64/asm(http block)/usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 48/001/test-inlined-imports-enabled-with-env-template-expressions-in-body.md 7zDW0_L0m ache/go/1.25.8/x64/pkg/tool/linux_amd64/asm GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/asm(http block)https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md/tmp/go-build3271272521/b404/cli.test /tmp/go-build3271272521/b404/cli.test -test.testlogfile=/tmp/go-build3271272521/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true -importcfg /tmp/go-build2072184651/b246/importcfg -pack /home/REDACTED/go/pkg/mod/golang.org/x/text@v0.36.0/message/catalog/catalog.go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/tmp/go-build1444161267/b404/cli.test /tmp/go-build1444161267/b404/cli.test -test.testlogfile=/tmp/go-build1444161267/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/go/1.25.8/xrepos/{owner}/{repo}/actions/runs/1/artifacts /usr/bin/git agentic-observabgit 7LFx/9x5EhNlMwHDrev-parse 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/compile /usr/bin/git g_.a log 1272521/b410=> git(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel go /usr/bin/git Imports419984651git GO111MODULE e_modules/.bin/s--show-toplevel git rev-�� --show-toplevel go /usr/bin/git ck 'scripts/**/*ls GO111MODULE /opt/hostedtoolc/tmp/gh-aw/aw-feature-branch.patch git(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv 2184651/b013/_pkg_.a N5EVshPW9 ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linutest@example.com env ortcfg GO111MODULE Name,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle GOINSECURE GOMOD 2184651/b013/sym-v ache/go/1.25.8/x64/pkg/tool/linu--auto(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go ode_�� -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv -json ii/equal_fold.go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD sm.s x_amd64/vet(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE sh GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json n/codec.go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile ch_w�� -json GO111MODULE x_amd64/vet GOINSECURE GOMOD nts.s x_amd64/vet(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile phen�� -json GO111MODULE x_amd64/vet GOINSECURE GOMOD t0_js_wasm.s x_amd64/vet(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet(http block)https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv -json .go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD emmove_wasm.s x_amd64/vet(http block)/usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env d GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999/usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv ortcfg kTMme1tRE ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile env ortcfg _tJr/waAXa3f4EjDQWGZF_tJr ache/go/1.25.8/x64/pkg/tool/linux_amd64/compile GOINSECURE ntio/asm/base64 GOMODCACHE ache/go/1.25.8/x^remote\..*\.gh-resolved$(http block)/usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv Gitmain_branch278428065/001' Gitmain_branch278428065/001' 64/bin/go GOINSECURE GOMOD GOMODCACHE go ode_�� -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet(http block)https://api.github.com/repos/nonexistent/repo/actions/runs/12345/usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu--json ortc�� /ref/tags/v9 om/goccy/go-yaml@v1.19.2/token/tnonexistent-workflow-12345 sv GOINSECURE t GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/asm(http block)/usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion -json GO111MODULE 64/bin/go git init�� GOMODCACHE go /usr/bin/git -json GO111MODULE 64/bin/go git(http block)https://api.github.com/repos/owner/repo/actions/workflows/usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE x_amd64/asm GOINSECURE GOMOD GOMODCACHE x_amd64/asm(http block)/usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile(http block)/usr/bin/gh gh workflow list --repo owner/repo --json name,path,state x_amd64/link GOINSECURE GOMOD GOMODCACHE x_amd64/link env 3911-33781/test-add-source-path-116862416 GO111MODULE ow.lock.yml GOINSECURE fips140/sha3 GOMODCACHE J_/CWrYu2czG7Ca7ylQP4Z8/vCNYLdc7Test User(http block)https://api.github.com/repos/test-owner/test-repo/actions/secrets/usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name go1.25.8 -c=4 -nolocalimports -importcfg /tmp/go-build3271272521/b435/importcfg -pack /tmp/go-build3271272521/b435/_testmain.go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)/usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go /pre�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go(http block)https://api.github.com/repos/test/repo/usr/bin/gh gh api /repos/test/repo --jq .default_branch 2184651/b201/_pkg_.a gLhb/hBEUOkjpLNrZf4ikgLhb ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE fips140/hkdf GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linuremote2 +x 2184651/b053/importcfg ZTds/2vgHE4jOupBv7mHHZTds 64/pkg/tool/linux_amd64/compile GOSUMDB GOWORK 64/bin/go 64/pkg/tool/linux_amd64/compile(http block)/usr/bin/gh gh api /repos/test/repo --jq .default_branch --show-toplevel go /usr/bin/git on' --ignore-patgit GO111MODULE 64/bin/go git conf�� user.name Test User /usr/bin/git -json GO111MODULE 64/bin/go git(http block)invalid.example.invalid/usr/lib/git-core/git-remote-https /usr/lib/git-core/git-remote-https origin https://invalid.example.invalid/nonexistent-repo.git e/git init�� ndor/bin/git git ode_modules/.bin/git =receive test@example.com--git-dir=/tmp/bare-incremental-rTlQUQ /git(dns block)If you need me to access, download, or install something from one of these locations, you can either: