From fa0493a6753e85dea1621014b90ff7bf4d02dfd9 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Sun, 2 Aug 2026 03:17:32 +0000 Subject: [PATCH 1/3] Initial plan From 7089624ac9fa7242f5eb4fc2ad561061ae84edaa Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Sun, 2 Aug 2026 03:27:13 +0000 Subject: [PATCH 2/3] chore: outline plan for container scan remediation Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> --- .github/workflows/smoke-checkout-pr-dispatch.lock.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/smoke-checkout-pr-dispatch.lock.yml b/.github/workflows/smoke-checkout-pr-dispatch.lock.yml index d7bfc8a9941..794e252976c 100644 --- a/.github/workflows/smoke-checkout-pr-dispatch.lock.yml +++ b/.github/workflows/smoke-checkout-pr-dispatch.lock.yml @@ -880,7 +880,7 @@ jobs: # --allow-tool shell(wc) # --allow-tool shell(yq) # --allow-tool write - timeout-minutes: 10 + timeout-minutes: 20 run: | set -o pipefail printf '%s' "$(date +%s%3N)" > /tmp/gh-aw/agent_cli_start_ms.txt @@ -927,7 +927,7 @@ jobs: GH_AW_PHASE: agent GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt GH_AW_SAFE_OUTPUTS: ${{ steps.set-runtime-paths.outputs.GH_AW_SAFE_OUTPUTS }} - GH_AW_TIMEOUT_MINUTES: 10 + GH_AW_TIMEOUT_MINUTES: 20 GH_AW_VERSION: dev GITHUB_API_URL: ${{ github.api_url }} GITHUB_AW: true @@ -1533,7 +1533,7 @@ jobs: continue-on-error: true id: detection_agentic_execution # Copilot CLI tool arguments (sorted): - timeout-minutes: 10 + timeout-minutes: 20 run: | set -o pipefail printf '%s' "$(date +%s%3N)" > /tmp/gh-aw/agent_cli_start_ms.txt @@ -1580,7 +1580,7 @@ jobs: GH_AW_MAX_TURNS: ${{ vars.GH_AW_DEFAULT_MAX_TURNS || '' }} GH_AW_PHASE: detection GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt - GH_AW_TIMEOUT_MINUTES: 10 + GH_AW_TIMEOUT_MINUTES: 20 GH_AW_VERSION: dev GITHUB_API_URL: ${{ github.api_url }} GITHUB_AW: true From 9abede29f2dba079b07cab11422e0c6084cc702c Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Sun, 2 Aug 2026 03:29:58 +0000 Subject: [PATCH 3/3] chore: drop vulnerable cli-proxy 0.27.42 pin Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> --- .github/aw/actions-lock.json | 5 ----- pkg/actionpins/data/action_pins.json | 5 ----- pkg/workflow/data/action_pins.json | 5 ----- 3 files changed, 15 deletions(-) diff --git a/.github/aw/actions-lock.json b/.github/aw/actions-lock.json index c3a37d60574..220f0345e8b 100644 --- a/.github/aw/actions-lock.json +++ b/.github/aw/actions-lock.json @@ -185,11 +185,6 @@ "digest": "sha256:d85f57975af5ea23af4996e41ed73fbc8f5b4a47402472bfe82e508f352cb0c1", "pinned_image": "ghcr.io/github/gh-aw-firewall/api-proxy:0.27.43@sha256:d85f57975af5ea23af4996e41ed73fbc8f5b4a47402472bfe82e508f352cb0c1" }, - "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.42": { - "image": "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.42", - "digest": "sha256:da006bf96d2d246dd269d57b233c1798d2ad63d6cd64ca02f7bf71045028781f", - "pinned_image": "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.42@sha256:da006bf96d2d246dd269d57b233c1798d2ad63d6cd64ca02f7bf71045028781f" - }, "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.43": { "image": "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.43", "digest": "sha256:65c45ea2967984d0024f3df61bc71335658a77ede96c8d9665da7a5f33a795ab", diff --git a/pkg/actionpins/data/action_pins.json b/pkg/actionpins/data/action_pins.json index c3a37d60574..220f0345e8b 100644 --- a/pkg/actionpins/data/action_pins.json +++ b/pkg/actionpins/data/action_pins.json @@ -185,11 +185,6 @@ "digest": "sha256:d85f57975af5ea23af4996e41ed73fbc8f5b4a47402472bfe82e508f352cb0c1", "pinned_image": "ghcr.io/github/gh-aw-firewall/api-proxy:0.27.43@sha256:d85f57975af5ea23af4996e41ed73fbc8f5b4a47402472bfe82e508f352cb0c1" }, - "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.42": { - "image": "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.42", - "digest": "sha256:da006bf96d2d246dd269d57b233c1798d2ad63d6cd64ca02f7bf71045028781f", - "pinned_image": "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.42@sha256:da006bf96d2d246dd269d57b233c1798d2ad63d6cd64ca02f7bf71045028781f" - }, "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.43": { "image": "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.43", "digest": "sha256:65c45ea2967984d0024f3df61bc71335658a77ede96c8d9665da7a5f33a795ab", diff --git a/pkg/workflow/data/action_pins.json b/pkg/workflow/data/action_pins.json index c3a37d60574..220f0345e8b 100644 --- a/pkg/workflow/data/action_pins.json +++ b/pkg/workflow/data/action_pins.json @@ -185,11 +185,6 @@ "digest": "sha256:d85f57975af5ea23af4996e41ed73fbc8f5b4a47402472bfe82e508f352cb0c1", "pinned_image": "ghcr.io/github/gh-aw-firewall/api-proxy:0.27.43@sha256:d85f57975af5ea23af4996e41ed73fbc8f5b4a47402472bfe82e508f352cb0c1" }, - "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.42": { - "image": "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.42", - "digest": "sha256:da006bf96d2d246dd269d57b233c1798d2ad63d6cd64ca02f7bf71045028781f", - "pinned_image": "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.42@sha256:da006bf96d2d246dd269d57b233c1798d2ad63d6cd64ca02f7bf71045028781f" - }, "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.43": { "image": "ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.43", "digest": "sha256:65c45ea2967984d0024f3df61bc71335658a77ede96c8d9665da7a5f33a795ab",