fix: use lowercase discussion categories to restore create_discussion tool by Mossaka · Pull Request #637 · github/gh-aw-firewall

Mossaka · 2026-02-10T08:01:41Z

Summary

Discussion-creating workflows stopped posting since Feb 3 because gh-aw v0.40.0 added category validation (5f5f0e99) that silently rejects uppercase names
category: "General" → parseDiscussionsConfig() returns nil → create_discussion tool dropped from config.json/tools.json → agent falls back to noop
Fix: change "General" to "general" in all 3 affected workflow .md files and recompile
Also fixes bash: → bash: true syntax in security-review.md

Affected workflows

ci-cd-gaps-assessment.md
security-review.md
pelis-agent-factory-advisor.md

Test plan

All 3 workflows compile with 0 errors, 0 warnings
Verified create_discussion is present in compiled config.json (was missing before)
Next scheduled run should create a discussion again

🤖 Generated with Claude Code

… tool gh-aw v0.40.0 added category validation (commit 5f5f0e99) that silently rejects uppercase category names, causing parseDiscussionsConfig() to return nil. This dropped create_discussion from the compiled config.json and tools.json, so agents had no discussion tool and fell back to noop. Change "General" → "general" in all three discussion-creating workflows. Also fix bash tool syntax in security-review.md (bash: → bash: true). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Copilot

Pull request overview

Restores discussion creation in agentic workflows by switching safe-outputs discussion category names to the lowercase slug expected by newer gh-aw validation, and recompiling the affected workflows/locks.

Changes:

Update safe-outputs.create-discussion.category from "General" to "general" in 3 workflow .md sources.
Fix security-review.md tool frontmatter (bash: true) and recompile the workflows into updated .lock.yml outputs.
Update locked gh-aw action reference metadata (including adding setup@v0.42.17 to the repo’s actions lock).

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
.github/workflows/security-review.md	Fixes tool frontmatter and switches discussion category to lowercase slug.
.github/workflows/security-review.lock.yml	Recompiled lockfile; includes restored `create_discussion` safe-output tooling and various generated upgrades.
.github/workflows/pelis-agent-factory-advisor.md	Switches discussion category to lowercase slug.
.github/workflows/pelis-agent-factory-advisor.lock.yml	Recompiled lockfile reflecting the updated discussion category and generated workflow changes.
.github/workflows/ci-cd-gaps-assessment.md	Switches discussion category to lowercase slug.
.github/workflows/ci-cd-gaps-assessment.lock.yml	Recompiled lockfile reflecting the updated discussion category and generated workflow changes.
.github/aw/actions-lock.json	Adds the `github/gh-aw/actions/setup@v0.42.17` pin used by regenerated lockfiles.
.github/agents/agentic-workflows.agent.md	Updates referenced gh-aw documentation links to v0.42.17 and tweaks guidance text.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-02-10T08:06:45Z

.github/workflows/ci-cd-gaps-assessment.lock.yml

+          sparse-checkout: |
+            .github
+            .agents
+          depth: 1


actions/checkout doesn’t have a depth input; this should be fetch-depth: 1 (as used in other workflows) or removed. As-is, the checkout depth setting will be ignored and may lead to unexpectedly slow or inconsistent checkouts.

Suggested change

depth: 1

fetch-depth: 1

Copilot · 2026-02-10T08:06:45Z

.github/workflows/security-review.lock.yml

+# This file was automatically generated by gh-aw (v0.42.17). DO NOT EDIT.
 #
 # To update this file, edit the corresponding .md file and run:


This lockfile change updates much more than the discussion category (e.g., bumps gh-aw to v0.42.17 and updates AWF/mcpg/copy/checkout behavior). If the intent of this PR is only to restore create_discussion, consider recompiling with the existing gh-aw version or explicitly calling out/isolating the broader upgrade so it can be reviewed as its own change.

Copilot · 2026-02-10T08:06:46Z

.github/workflows/security-review.md

+  bash: true
  web-fetch:
  cache-memory: true


bash: true is the only workflow in the repo using a boolean here; other workflows/docs use a list of allowed patterns (e.g., bash: ["*"] or bash:\n - "*"). Consider switching to the consistent list form to avoid schema ambiguity and make the allowed surface explicit.

Copilot · 2026-02-10T08:06:46Z

.github/workflows/security-review.lock.yml

+          sparse-checkout: |
+            .github
+            .agents
+          depth: 1


actions/checkout doesn’t have a depth input; this should be fetch-depth: 1 (as used in other workflows) or removed. As-is, the checkout depth setting will be ignored and may lead to unexpectedly slow or inconsistent checkouts.

Suggested change

depth: 1

fetch-depth: 1

Copilot · 2026-02-10T08:06:46Z

.github/workflows/pelis-agent-factory-advisor.lock.yml

+          sparse-checkout: |
+            .github
+            .agents
+          depth: 1


actions/checkout doesn’t have a depth input; this should be fetch-depth: 1 (as used in other workflows) or removed. As-is, the checkout depth setting will be ignored and may lead to unexpectedly slow or inconsistent checkouts.

Suggested change

depth: 1

fetch-depth: 1

…onflicts Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

github-actions · 2026-02-10T21:06:26Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-02-10T21:06:29Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-02-10T21:06:44Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-02-10T21:07:03Z

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	82.02%	82.02%	➡️ +0.00%
Statements	82.06%	82.06%	➡️ +0.00%
Functions	81.95%	81.95%	➡️ +0.00%
Branches	74.41%	74.41%	➡️ +0.00%

Coverage comparison generated by scripts/ci/compare-coverage.ts

github-actions · 2026-02-10T21:09:44Z

Node.js Build Test Results

Project	Install	Tests	Status
clsx	✅	PASS	✅ PASS
execa	✅	PASS	✅ PASS
p-limit	✅	PASS	✅ PASS

Overall: ✅ PASS

All Node.js projects built and tested successfully.

AI generated by Build Test Node.js

github-actions · 2026-02-10T21:09:54Z

Smoke Test Results

Last 2 Merged PRs:

chore(deps-dev): bump eslint from 8.57.1 to 10.0.0 in the linting group #581: chore(deps-dev): bump eslint from 8.57.1 to 10.0.0 in the linting group
feat: fail smoke workflows when safe outputs are not invoked #570: feat: fail smoke workflows when safe outputs are not invoked

Tests:

✅ GitHub MCP: Retrieved merged PRs
✅ Playwright: Page title verified ("GitHub")
✅ File Writing: Created smoke-test-copilot-21882394032.txt
✅ Bash Tool: Verified file contents

Status: PASS

cc @Mossaka

AI generated by Smoke Copilot

github-actions · 2026-02-10T21:09:56Z

Smoke Test Results (Run #21882393992)

PRs reviewed:

chore(deps-dev): bump eslint from 8.57.1 to 10.0.0 in the linting group #581: chore(deps-dev): bump eslint from 8.57.1 to 10.0.0 in the linting group
[agentic-workflows] Failed runs #587: feat: fail smoke workflows when safe outputs are not invoked

✅ GitHub MCP - PASS
✅ Playwright - PASS (page title: "GitHub · Change is constant. GitHub keeps you ahead. · GitHub")
✅ File Writing - PASS
✅ Bash Tool - PASS

Status: PASS

AI generated by Smoke Claude

github-actions · 2026-02-10T21:09:56Z

Go Build Test Results

Project	Download	Tests	Status
color	✅	1/1	PASS
env	✅	1/1	PASS
uuid	✅	1/1	PASS

Overall: PASS ✅

All Go projects successfully downloaded dependencies and passed tests.

AI generated by Build Test Go

github-actions · 2026-02-10T21:10:13Z

Deno Build Test Results

Project	Tests	Status
oak	1/1	✅ PASS
std	1/1	✅ PASS

Overall: ✅ PASS

All Deno tests completed successfully.

AI generated by Build Test Deno

github-actions · 2026-02-10T21:10:15Z

C++ Build Test Results

Project	CMake	Build	Status
fmt	✅	✅	PASS
json	✅	✅	PASS

Overall: PASS ✅

All C++ projects built successfully.

AI generated by Build Test C++

github-actions · 2026-02-10T21:10:29Z

.NET Build Test Results

Project	Restore	Build	Run	Status
hello-world	✅	✅	✅	PASS
json-parse	✅	✅	✅	PASS

Overall: PASS ✅

All .NET projects built and ran successfully.

AI generated by Build Test .NET

github-actions · 2026-02-10T21:10:46Z

PRs reviewed: chore(deps-dev): bump eslint from 8.57.1 to 10.0.0 in the linting group; feat: fail smoke workflows when safe outputs are not invoked
GitHub MCP review ✅
Safeinputs GH CLI ✅
Playwright title check ✅
Tavily search ❌ (no Tavily MCP tool)
File write ✅
Bash cat ✅
Discussion comment ✅
Build (npm ci && npm run build) ✅
Overall: FAIL

AI generated by Smoke Codex

github-actions · 2026-02-10T21:10:47Z

Build Test: Java ✅

Java build tests completed successfully through AWF firewall.

Project	Compile	Tests	Status
gson	✅	1/1	PASS
caffeine	✅	1/1	PASS

Overall: PASS

All Java projects compiled and tested successfully with Maven proxy configured for AWF.

AI generated by Build Test Java

github-actions · 2026-02-10T21:19:25Z

Smoke Test Results

Last 2 Merged PRs:

fix: restrict host gateway iptables bypass to allowed ports only #558 - fix: restrict host gateway iptables bypass to allowed ports only
chore(deps-dev): bump eslint from 8.57.1 to 10.0.0 in the linting group #581 - chore(deps-dev): bump eslint from 8.57.1 to 10.0.0 in the linting group

Test Results:

✅ GitHub MCP: Fetched merged PRs successfully
✅ Playwright: Page title contains "GitHub"
✅ File Write: Created test file successfully
✅ Bash Tool: Verified file contents

Overall Status: PASS

cc @Mossaka

AI generated by Smoke Copilot

github-actions · 2026-02-10T21:19:32Z

Smoke Test Results - Claude Engine

Recent PRs:

fix(workflows): correct discussion category case to enable posting
fix: restrict host gateway iptables bypass to allowed ports only

Test Results:

✅ GitHub MCP
✅ Playwright (title: "GitHub · Change is constant. GitHub keeps you ahead. · GitHub")
✅ File writing
✅ Bash tool

Status: PASS

AI generated by Smoke Claude

Copilot AI review requested due to automatic review settings February 10, 2026 08:01

Copilot started reviewing on behalf of Mossaka February 10, 2026 08:02 View session

Copilot AI reviewed Feb 10, 2026

View reviewed changes

Merge origin/main: resolve checkout action SHA and frontmatter-hash c…

41417c8

…onflicts Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

github-actions bot mentioned this pull request Feb 10, 2026

[agentics] No-Op Runs #624

Closed

github-actions bot added the build-test-node label Feb 10, 2026

github-actions bot added build-test-go smoke-copilot labels Feb 10, 2026

github-actions bot added the smoke-claude label Feb 10, 2026

github-actions bot added build-test-deno build-test-cpp labels Feb 10, 2026

github-actions bot added the build-test-dotnet label Feb 10, 2026

github-actions bot added the build-test-java label Feb 10, 2026

Mossaka merged commit 3bd6df8 into main Feb 10, 2026
97 of 98 checks passed

Mossaka deleted the fix/lowercase-discussion-categories branch February 10, 2026 21:27

Conversation

Mossaka commented Feb 10, 2026

Summary

Affected workflows

Test plan

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Feb 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 10, 2026

✅ Coverage Check Passed

Overall Coverage

Uh oh!

github-actions bot commented Feb 10, 2026

Node.js Build Test Results

Uh oh!

github-actions bot commented Feb 10, 2026

Smoke Test Results

Uh oh!

github-actions bot commented Feb 10, 2026

Uh oh!

github-actions bot commented Feb 10, 2026

Go Build Test Results

Uh oh!

github-actions bot commented Feb 10, 2026

Deno Build Test Results

Uh oh!

github-actions bot commented Feb 10, 2026

C++ Build Test Results

Uh oh!

github-actions bot commented Feb 10, 2026

.NET Build Test Results

Uh oh!

github-actions bot commented Feb 10, 2026

Uh oh!

github-actions bot commented Feb 10, 2026

Build Test: Java ✅

Uh oh!

github-actions bot commented Feb 10, 2026

Smoke Test Results

Uh oh!

github-actions bot commented Feb 10, 2026

Smoke Test Results - Claude Engine

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions bot commented Feb 10, 2026 •

edited

Loading

github-actions bot commented Feb 10, 2026 •

edited

Loading

github-actions bot commented Feb 10, 2026 •

edited

Loading