Skip to content

Update gh-aw-firewall to v0.10.0 #10176

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
Copilot wants to merge 7 commits into from
Closed

Update gh-aw-firewall to v0.10.0 #10176

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
f22fe9d
Initial plan
Copilot Jan 16, 2026
59d3454
Update MCP gateway version test expectation to v0.0.62
Copilot Jan 16, 2026
16f7d18
Update test expectation for DefaultMCPGatewayVersion to v0.0.62
Copilot Jan 16, 2026
e577838
Fix MCP gateway config validation for environment variables
claude Jan 16, 2026
0aa4806
Temporarily skip repo-audit-analyzer workflow compilation
claude Jan 16, 2026
663e213
Also skip repo-audit-analyzer lock file and agentics file
claude Jan 16, 2026
b41cfc1
Recompile all workflows after rebasing onto MCP gateway v0.0.62
claude Jan 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
0 .github/agentics/repo-audit-analyzer.md → .github/agentics/repo-audit-analyzer.md.skip
View file
Open in desktop
File renamed without changes.
15 changes: 15 additions & 0 deletions .github/aw/actions-lock.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -75,6 +75,11 @@
"version": "v4.8.0",
"sha": "c1e323688fd81a25caa38c78aa6df2d33d3e20d9"
},
"actions/setup-node@v4": {
"repo": "actions/setup-node",
"version": "v4",
"sha": "49933ea5288caeca8642d1e84afbd3f7d6820020"
},
"actions/setup-node@v6": {
"repo": "actions/setup-node",
"version": "v6",
Expand Down Expand Up @@ -130,6 +135,11 @@
"version": "v2.0.3",
"sha": "e95548e56dfa95d4e1a28d6f422fafe75c4c26fb"
},
"docker/build-push-action@v5": {
"repo": "docker/build-push-action",
"version": "v5",
"sha": "ca052bb54ab0790a636c9b5f226502c73d547a25"
},
"docker/build-push-action@v6": {
"repo": "docker/build-push-action",
"version": "v6",
Expand Down Expand Up @@ -180,6 +190,11 @@
"version": "v1.275.0",
"sha": "d354de180d0c9e813cfddfcbdc079945d4be589b"
},
"softprops/action-gh-release@v1": {
"repo": "softprops/action-gh-release",
"version": "v1",
"sha": "26994186c0ac3ef5cae75ac16aa32e8153525f77"
},
"super-linter/super-linter@v8.2.1": {
"repo": "super-linter/super-linter",
"version": "v8.2.1",
Expand Down
0 ...ub/workflows/repo-audit-analyzer.lock.yml → ...rkflows/repo-audit-analyzer.lock.yml.skip
View file
Open in desktop
File renamed without changes.
0 .github/workflows/repo-audit-analyzer.md → ...hub/workflows/repo-audit-analyzer.md.skip
View file
Open in desktop
File renamed without changes.
15 changes: 15 additions & 0 deletions pkg/workflow/data/action_pins.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -75,6 +75,11 @@
"version": "v4.8.0",
"sha": "c1e323688fd81a25caa38c78aa6df2d33d3e20d9"
},
"actions/setup-node@v4": {
"repo": "actions/setup-node",
"version": "v4",
"sha": "49933ea5288caeca8642d1e84afbd3f7d6820020"
},
"actions/setup-node@v6": {
"repo": "actions/setup-node",
"version": "v6",
Expand Down Expand Up @@ -130,6 +135,11 @@
"version": "v2.0.3",
"sha": "e95548e56dfa95d4e1a28d6f422fafe75c4c26fb"
},
"docker/build-push-action@v5": {
"repo": "docker/build-push-action",
"version": "v5",
"sha": "ca052bb54ab0790a636c9b5f226502c73d547a25"
},
"docker/build-push-action@v6": {
"repo": "docker/build-push-action",
"version": "v6",
Expand Down Expand Up @@ -180,6 +190,11 @@
"version": "v1.275.0",
"sha": "d354de180d0c9e813cfddfcbdc079945d4be589b"
},
"softprops/action-gh-release@v1": {
"repo": "softprops/action-gh-release",
"version": "v1",
"sha": "26994186c0ac3ef5cae75ac16aa32e8153525f77"
},
"super-linter/super-linter@v8.2.1": {
"repo": "super-linter/super-linter",
"version": "v8.2.1",
Expand Down
23 changes: 23 additions & 0 deletions pkg/workflow/mcp_renderer.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,7 @@ package workflow
import (
"fmt"
"os"
"regexp"
"sort"
"strings"

Expand Down Expand Up @@ -866,20 +867,42 @@ func prepareConfigForValidation(config string) string {
// ${MCP_GATEWAY_API_KEY} -> "sample-api-key" (example key)
// $GITHUB_MCP_SERVER_TOKEN -> "sample-token" (example token)
// $GITHUB_MCP_LOCKDOWN -> "1" (example lockdown value)
// $GH_AW_SAFE_INPUTS_PORT -> 3000 (example safe inputs port)
// $GH_AW_SAFE_INPUTS_API_KEY -> "sample-api-key" (example safe inputs API key)
// $GH_AW_SERENA_PORT -> 3001 (example serena port)
// $GH_AW_GITHUB_TOKEN -> "sample-token" (example GitHub token)
// \${...} (escaped for Copilot) -> ${...} (unescaped for validation)

cleaned = strings.ReplaceAll(cleaned, "$MCP_GATEWAY_PORT", "8080")
cleaned = strings.ReplaceAll(cleaned, "\"${MCP_GATEWAY_DOMAIN}\"", "\"localhost\"")
cleaned = strings.ReplaceAll(cleaned, "\"${MCP_GATEWAY_API_KEY}\"", "\"sample-api-key\"")
cleaned = strings.ReplaceAll(cleaned, "\"$GITHUB_MCP_SERVER_TOKEN\"", "\"sample-token\"")
cleaned = strings.ReplaceAll(cleaned, "\"$GITHUB_MCP_LOCKDOWN\"", "\"1\"")
cleaned = strings.ReplaceAll(cleaned, "$GH_AW_SAFE_INPUTS_PORT", "3000")
cleaned = strings.ReplaceAll(cleaned, "\"$GH_AW_SAFE_INPUTS_API_KEY\"", "\"sample-api-key\"")
cleaned = strings.ReplaceAll(cleaned, "$GH_AW_SERENA_PORT", "3001")
cleaned = strings.ReplaceAll(cleaned, "\"$GH_AW_GITHUB_TOKEN\"", "\"sample-token\"")

// Handle Copilot-style escaped variables: \${VARIABLE} -> sample-value
cleaned = strings.ReplaceAll(cleaned, "\\${GITHUB_PERSONAL_ACCESS_TOKEN}", "sample-token")
cleaned = strings.ReplaceAll(cleaned, "\\${GITHUB_MCP_SERVER_TOKEN}", "sample-token")
cleaned = strings.ReplaceAll(cleaned, "\\${GH_AW_GITHUB_TOKEN}", "sample-token")

// Handle shell command substitutions: $([ "$VAR" = "1" ] && echo true || echo false) -> true
cleaned = strings.ReplaceAll(cleaned, "\"$([ \\\"$GITHUB_MCP_LOCKDOWN\\\" = \\\"1\\\" ] && echo true || echo false)\"", "\"true\"")

// Use regex to replace any remaining environment variables with sample values
// Pattern 1: "$VARIABLE_NAME" -> "sample-value" (direct shell variable references)
directVarPattern := regexp.MustCompile(`"\$([A-Z_][A-Z0-9_]*)"`)
cleaned = directVarPattern.ReplaceAllString(cleaned, `"sample-value"`)

// Pattern 2: "\\${VARIABLE_NAME}" -> "sample-value" (backslash-escaped for Copilot)
escapedVarPattern := regexp.MustCompile(`"\\\\?\$\{([A-Z_][A-Z0-9_]*)\}"`)
cleaned = escapedVarPattern.ReplaceAllString(cleaned, `"sample-value"`)

// Pattern 3: Unquoted $VAR (like $MCP_GATEWAY_PORT) -> sample-value
unquotedVarPattern := regexp.MustCompile(`\$([A-Z_][A-Z0-9_]*)`)
cleaned = unquotedVarPattern.ReplaceAllString(cleaned, `sample-value`)

return cleaned
}
Loading