Move safe-output file from /tmp to /opt for read-only agent access #11169

Copilot · 2026-01-22T04:16:54Z

Change safe-output file location from /tmp to /opt

Security Improvement: The safe-output MCP server now stores outputs in /opt/gh-aw/safeoutputs/outputs.jsonl (read-only mount for agent container) instead of /tmp/gh-aw/safeoutputs/outputs.jsonl (read-write mount). This prevents the agent container from having write access to the output file.

Changes Made

Files Changed

Go Code:

pkg/workflow/compiler_activation_jobs.go - Updated GH_AW_SAFE_OUTPUTS environment variable
pkg/workflow/agentic_output_test.go - Updated test assertions

JavaScript:

actions/setup/js/safe_outputs_config.cjs - Updated default output file path
actions/setup/js/safe_outputs_bootstrap.cjs - Updated config path default
actions/setup/js/safe_outputs_tools_loader.cjs - Updated default tools path
actions/setup/js/collect_ndjson_output.cjs - Updated validation config and output file paths
actions/setup/js/redact_secrets.cjs - Extended to scan both /tmp/gh-aw and /opt/gh-aw directories

JavaScript Tests:

actions/setup/js/collect_ndjson_output.test.cjs - Updated all config paths to /opt
actions/setup/js/safe_outputs_config.test.cjs - Updated expected default path
actions/setup/js/safe_outputs_mcp_server_defaults.test.cjs - Updated config paths and directory setup
actions/setup/js/safe_outputs_tools_loader.test.cjs - Updated default tools path
actions/setup/js/redact_secrets.test.cjs - Updated log message expectations

Documentation:

specs/layout.md - Updated file location documentation
specs/security_review.md - Updated security review diagrams and examples
specs/safe-output-environment-variables.md - Updated environment variable examples
docs/src/content/docs/reference/environment-variables.md - Updated documentation

Compiled Workflows:

All 133 .lock.yml files recompiled with new path

Test Results

✅ All tests passing:

Go tests: TestAgenticOutputCollection - PASS
JavaScript tests: 3000 tests passed ✅
Secret redaction tests: 33 tests passed ✅
Safe outputs tests: All tests passed ✅

Security Enhancement

The secret redaction script now processes both directories:

/tmp/gh-aw - Temporary files and logs
/opt/gh-aw - Configuration and safe-output files (including outputs.jsonl)

This ensures secrets are redacted from the safe-output file before artifacts are uploaded.

Original prompt

Service department: good price.

@copilot, update the safe-output MCP server to change how it stores outputs sent by the LLM.

Currently, it writes a .jsonl file under the /tmp folder. Update it to store that file under the /opt folder alongside the other JavaScript files. This change should prevent the agent container from having write access to that file.

Also update the agent intake code so that it reads from the new file location.

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

Changeset

Type: patch
Description: Move safe-output storage from /tmp to /opt and update the agent intake and secret-redaction scripts to read from the new path (/opt/gh-aw/safeoutputs/outputs.jsonl). This keeps the file writable by the MCP server while making it read-only inside the agent container.

Ahoy! This treasure was crafted by 🏴‍☠️ Changeset Generator

Changeset

Type: patch
Description: Move safe-output storage from /tmp to /opt and update the agent intake and secret-redaction scripts to read from /opt/gh-aw/safeoutputs/outputs.jsonl. This keeps the file writable by the MCP server while making it read-only inside the agent container.

Ahoy! This treasure was crafted by 🏴‍☠️ Changeset Generator

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-01-22T04:25:03Z

@copilot, ensure that secret redaction also processes this new file location.

Changes: - Updated Go code to set GH_AW_SAFE_OUTPUTS to /opt/gh-aw/safeoutputs/outputs.jsonl - Updated JavaScript default paths in safe_outputs_config.cjs and safe_outputs_bootstrap.cjs - Updated collect_ndjson_output.cjs to read from /opt for config and validation files - Updated test assertions to expect new path - Updated documentation in specs/ and docs/ - Recompiled all workflow files with new path Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Extended redact_secrets.cjs to scan both /tmp/gh-aw and /opt/gh-aw directories for secret redaction. This ensures the safe-output file in /opt/gh-aw/safeoutputs/outputs.jsonl is also processed for secret removal before artifacts are uploaded. Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-01-22T04:44:17Z

@copilot, ensure that secret redaction also processes this new file location.

Updated in 774ea3b. The redact_secrets.cjs script now scans both /tmp/gh-aw and /opt/gh-aw directories to ensure secrets are redacted from the safe-output file before artifacts are uploaded.

github-actions · 2026-01-22T05:12:13Z

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

github-actions · 2026-01-22T05:12:14Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-01-22T05:12:17Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-01-22T05:12:19Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-01-22T05:15:47Z

Smoke Test Results - Copilot

✅ GitHub MCP (Add temporary project ID support for safe outputs #11174, Fix add_comment to respect append-only-comments from messages config #11173)
✅ Serena MCP
✅ Playwright
✅ File Writing
✅ Bash Tool

Status: PASS

@pelikhan

AI generated by Smoke Copilot

github-actions · 2026-01-22T05:16:13Z

Smoke Test Results

Last 2 Merged PRs:

Add temporary project ID support for safe outputs #11174: Add temporary project ID support for safe outputs
Fix add_comment to respect append-only-comments from messages config #11173: Fix add_comment to respect append-only-comments

Tests:

✅ GitHub MCP
✅ Serena MCP
✅ Playwright
✅ Tavily
✅ File Writing
✅ Bash Tool

Overall: PASS

AI generated by Smoke Claude

github-actions · 2026-01-22T05:16:21Z

GitHub MCP: ✅ Add temporary project ID support for safe outputs; Fix add_comment to respect append-only-comments from messages config
Serena MCP: ✅
Playwright: ✅
Tavily: ✅
File write: ✅
Bash cat: ✅
Overall: PASS

AI generated by Smoke Codex

pelikhan · 2026-01-22T05:25:27Z

@copilot, merge main, format, lint, fix text, then recompile.

Updated all JavaScript test files to use /opt/gh-aw/safeoutputs paths: - collect_ndjson_output.test.cjs: Updated config and validation paths - safe_outputs_config.test.cjs: Updated expected default path - safe_outputs_mcp_server_defaults.test.cjs: Updated config paths and expectations - safe_outputs_tools_loader.test.cjs: Updated default tools path - redact_secrets.test.cjs: Updated log message expectations All 3000 JS tests now pass ✅ Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-01-22T06:21:27Z

@copilot merge main, fix js tests

Completed in 5b478eb (merge) and 3043e0c (test fixes).

Merged main branch and fixed all JavaScript test failures:

Updated test paths from /tmp/gh-aw/safeoutputs to /opt/gh-aw/safeoutputs
Fixed expectations for new log messages in redact_secrets
Updated default tools path in safe_outputs_tools_loader

✅ All 3000 JavaScript tests now passing

github-actions · 2026-01-22T06:26:34Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-01-22T06:26:35Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-01-22T06:26:35Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-01-22T06:26:38Z

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

github-actions · 2026-01-22T06:30:08Z

Smoke Test Results

Recent PRs:

Research: Ralph Loop pattern implementation in gh-aw #11145: Research: Ralph Loop pattern implementation
Add Ralph Loop workflow example for iterative task execution #11150: Add Ralph Loop workflow example

Tests:

✅ GitHub MCP
✅ Serena MCP
✅ Playwright
✅ Tavily Search
✅ File Writing
✅ Bash Tool

Overall: PASS

AI generated by Smoke Claude

github-actions · 2026-01-22T06:30:14Z

GitHub MCP ✅: Add version check to upgrade command to enforce latest extension | Pass HTTP MCP server secrets to gateway container
Serena activate ✅
Playwright github title ✅
Tavily search ✅
File write ✅
Bash cat ✅
Overall: PASS

AI generated by Smoke Codex

github-actions · 2026-01-22T06:30:24Z

Smoke Test: Copilot Engine ✅

Last 2 Merged PRs:

Add version check to upgrade command to enforce latest extension #11187: Add version check to upgrade command
Pass HTTP MCP server secrets to gateway container #11185: Pass HTTP MCP server secrets to gateway

Results:

✅ GitHub MCP
✅ Serena MCP
✅ Playwright
✅ File Writing
✅ Bash Tool

Overall: PASS

cc: @pelikhan @Copilot

AI generated by Smoke Copilot

pelikhan · 2026-01-22T06:36:43Z

@copilot grep for any references to the old file location as a sanity check

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Initial plan

57e6f08

Copilot AI assigned Copilot and pelikhan Jan 22, 2026

Copilot started work on behalf of pelikhan January 22, 2026 04:17 View session

Initial investigation of safe-output file location change

2e74edb

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Update LLM output storage to new location~~ Move safe-output file from /tmp to /opt for read-only agent access Jan 22, 2026

Copilot AI requested a review from pelikhan January 22, 2026 04:37

Copilot finished work on behalf of pelikhan January 22, 2026 04:37

Copilot started work on behalf of pelikhan January 22, 2026 04:38 View session

Copilot finished work on behalf of pelikhan January 22, 2026 04:45

pelikhan added the smoke label Jan 22, 2026

Add changeset: move safe-output to /opt [skip-ci]

9b2d6c3

github-actions bot added the smoke-copilot label Jan 22, 2026

This was referenced Jan 22, 2026

Smoke Test: Copilot - 21236901194 #11184

Closed

Smoke Test: Claude - 21236901198 #11186

Closed

github-actions bot added the smoke-claude label Jan 22, 2026

github-actions bot added the smoke-codex label Jan 22, 2026

Copilot started work on behalf of pelikhan January 22, 2026 05:25 View session

Copilot started work on behalf of pelikhan January 22, 2026 06:03 View session

Copilot AI and others added 2 commits January 22, 2026 06:07

Merge origin/main - resolve conflict in redact_secrets.cjs

5b478eb

Copilot finished work on behalf of pelikhan January 22, 2026 06:22

pelikhan added smoke and removed smoke smoke-claude smoke-codex smoke-copilot labels Jan 22, 2026

Add changeset [skip-ci]

a292019

github-actions bot mentioned this pull request Jan 22, 2026

Smoke Test: Claude - 21238463252 #11200

Closed

github-actions bot added the smoke-claude label Jan 22, 2026

github-actions bot added the smoke-codex label Jan 22, 2026

github-actions bot mentioned this pull request Jan 22, 2026

Smoke Test: Copilot - 21238463240 #11201

Closed

github-actions bot added the smoke-copilot label Jan 22, 2026

Copilot started work on behalf of pelikhan January 22, 2026 06:37 View session

Changes before error encountered

5df9077

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan merged commit 600aefc into main Jan 22, 2026

pelikhan deleted the copilot/update-output-storage-path branch January 22, 2026 07:12

github-actions bot mentioned this pull request Jan 22, 2026

[team-status] Daily Team Status - January 22, 2026 #11236

Closed

Move safe-output file from /tmp to /opt for read-only agent access #11169

Move safe-output file from /tmp to /opt for read-only agent access #11169

Uh oh!

Conversation

Copilot AI commented Jan 22, 2026 • edited by agentic-workflows-dev bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Change safe-output file location from /tmp to /opt

Changes Made

Files Changed

Test Results

Security Enhancement

Changeset

Changeset

Uh oh!

pelikhan commented Jan 22, 2026

Uh oh!

Copilot AI commented Jan 22, 2026

Uh oh!

github-actions bot commented Jan 22, 2026 • edited by agentic-workflows-dev bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 22, 2026

Smoke Test Results - Copilot

Uh oh!

github-actions bot commented Jan 22, 2026

Smoke Test Results

Uh oh!

github-actions bot commented Jan 22, 2026

Uh oh!

pelikhan commented Jan 22, 2026

Uh oh!

Copilot AI commented Jan 22, 2026

Uh oh!

github-actions bot commented Jan 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 22, 2026 • edited by agentic-workflows-dev bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 22, 2026

Smoke Test Results

Uh oh!

github-actions bot commented Jan 22, 2026

Uh oh!

github-actions bot commented Jan 22, 2026

Smoke Test: Copilot Engine ✅

Uh oh!

pelikhan commented Jan 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Jan 22, 2026 •

edited by agentic-workflows-dev bot

Loading

github-actions bot commented Jan 22, 2026 •

edited by agentic-workflows-dev bot

Loading

github-actions bot commented Jan 22, 2026 •

edited

Loading

github-actions bot commented Jan 22, 2026 •

edited

Loading

github-actions bot commented Jan 22, 2026 •

edited

Loading

github-actions bot commented Jan 22, 2026 •

edited

Loading

github-actions bot commented Jan 22, 2026 •

edited

Loading

github-actions bot commented Jan 22, 2026 •

edited

Loading

github-actions bot commented Jan 22, 2026 •

edited by agentic-workflows-dev bot

Loading