Update audit-workflows: increase timeouts and always generate discussion reports

[Copilot]

Changes

This PR updates the audit-workflows.md agentic workflow to improve reliability and ensure consistent reporting:

1. Increased Tool Call Timeout (60s → 5 minutes)

The workflow audit agent often needs to process large log files and perform complex analysis operations. The previous 60-second timeout was insufficient for these operations, causing premature timeouts during tool execution.

Configuration change:

tools:
  cache-memory: true
  timeout: 300  # 5 minutes for tool execution

This sets MCP_TOOL_TIMEOUT, BASH_DEFAULT_TIMEOUT_MS, and BASH_MAX_TIMEOUT_MS to 300 seconds (300,000 milliseconds), giving tools adequate time to complete their operations.

2. Increased Total Workflow Timeout (20min → 30min)

Daily audit runs analyze all workflow executions from the last 24 hours, which can involve downloading and processing significant amounts of log data. The previous 20-minute limit was too restrictive for thorough analysis.

Configuration change:

timeout_minutes: 30  # Total workflow timeout

3. Always Generate Discussion Reports

Previously, the workflow had three conditional paths (Options A, B, C) that allowed the agent to:

• Create a discussion (if issues found)
• Create a PR (if fixes available)
• Take no action (if everything is working)

This conditional logic resulted in inconsistent reporting where successful audits produced no output, making it difficult to track audit history and confirm the workflow was running correctly.

Changes made:

• Renamed Phase 4 from "Decision Making" to "Create Discussion Report"
• Added clear directive: "ALWAYS create a comprehensive discussion report with your audit findings, regardless of whether issues were found or not."
• Removed Option B (Create Pull Request) and Option C (No Action Needed)
• Updated Output Requirements to mandate discussion creation
• Updated Success Criteria to reflect mandatory reporting

This ensures every audit run produces a traceable discussion record, whether issues are found or not, improving visibility into workflow health and audit history.

Testing

• ✅ Workflow compiles successfully with no errors
• ✅ All unit tests pass
• ✅ Lock file correctly reflects timeout changes:
  • timeout-minutes: 30 in agent job
  • MCP_TOOL_TIMEOUT: "300000" (5 minutes in milliseconds)
  • BASH_DEFAULT_TIMEOUT_MS: "300000"
  • BASH_MAX_TIMEOUT_MS: "300000"

Original prompt

Update workflow audit agentic workflows

• increase tool call timeout to 5 minutes
• increase total time out to 30min
• always always generate a discussion

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[github-actions]

Agentic Changeset Generator triggered by this pull request.