github · Copilot · Dec 24, 2025 · Dec 24, 2025 · Dec 24, 2025 · Dec 24, 2025
diff --git a/.github/aw/schemas/agentic-workflow.json b/.github/aw/schemas/agentic-workflow.json
@@ -4907,6 +4907,10 @@
             "action-version": {
               "type": "string",
               "description": "Version of the setup action to use (e.g., 'v4', 'v5'). Overrides the default action version."
+            },
+            "action-tag": {
+              "type": "string",
+              "description": "Custom tag for the setup action (e.g., 'latest', 'main'). When specified, overrides SHA-pinned action reference and uses this tag directly. Use with caution as non-SHA references reduce security."
             }
           },
           "additionalProperties": false

diff --git a/.github/workflows/agent-performance-analyzer.lock.yml b/.github/workflows/agent-performance-analyzer.lock.yml
diff --git a/.github/workflows/campaign-manager.lock.yml b/.github/workflows/campaign-manager.lock.yml
diff --git a/.github/workflows/daily-file-diet.lock.yml b/.github/workflows/daily-file-diet.lock.yml
diff --git a/.github/workflows/daily-firewall-report.lock.yml b/.github/workflows/daily-firewall-report.lock.yml
diff --git a/.github/workflows/deep-report.lock.yml b/.github/workflows/deep-report.lock.yml
diff --git a/.github/workflows/human-ai-collaboration.lock.yml b/.github/workflows/human-ai-collaboration.lock.yml
diff --git a/.github/workflows/incident-response.lock.yml b/.github/workflows/incident-response.lock.yml
diff --git a/.github/workflows/intelligence.lock.yml b/.github/workflows/intelligence.lock.yml