Convert 55.8% of agentic workflows to use tools.github mode: gh-proxy and tools.cli-proxy by Copilot · Pull Request #29418 · github/gh-aw

Copilot · 2026-05-01T02:11:03Z

Summary

Converts 55.8% (101/181) of agentic workflows to use tools.github.mode: gh-proxy and tools.cli-proxy: true for better performance.

Changes

Phase 1: Add mode: gh-proxy to 75 agentic workflows that have cli-proxy: true + tools.github: but no existing mode
Phase 2: Add cli-proxy: true to copilot-token-optimizer.md (had mode: gh-proxy but missing cli-proxy)
Phase 3: Convert 23 non-smoke agentic workflows from remaining set — add both cli-proxy: true + mode: gh-proxy
Fix static-analysis-report.md YAML indentation issue
Recompile all 205 workflow lock files
Prompt alignment: Updated 8 workflow prompts to use gh CLI instead of GitHub MCP tools, since mode: gh-proxy makes no GitHub MCP server available at runtime

Result

101/181 (55.8%) agentic workflows now use both tools.github.mode: gh-proxy and tools.cli-proxy: true.

Prompt Updates

Workflows whose prompts previously instructed agents to use GitHub MCP tools (which are unavailable in gh-proxy mode) were updated to use gh CLI equivalents:

copilot-opt.md: Replaced "Never use gh CLI" rule with "Use gh CLI for GitHub reads"; replaced get_pull_request MCP reference with gh pr view/list
deployment-incident-monitor.md: Replaced "GitHub MCP tools" with gh run list / gh api commands
daily-aw-cross-repo-compile-check.md: Replaced GitHub MCP search guidance with gh search code / gh repo view
spec-enforcer.md: Replaced "Use GitHub MCP server (not gh api)" with gh pr list
stale-repo-identifier.md: Replaced list_commits, search_issues, list_pull_requests, list_releases MCP references with gh CLI equivalents
sub-issue-closer.md: Replaced GitHub MCP server references with gh issue list
ubuntu-image-analyzer.md: Replaced "GitHub MCP Tools (Read-Only)" guide section with gh run list / gh api equivalents
grumpy-reviewer.md: Replaced vague "Use the GitHub tools" with explicit gh pr view / gh pr diff commands

Workflows NOT converted (intentionally excluded)

13 smoke test workflows testing specific modes (mode: local is required for their tests)
schema-consistency-checker.md — explicitly uses mode: remote for schema testing
8 workflows with explicit mode: local or mode: remote for testing purposes
Workflows with github: false (github tools explicitly disabled)
daily-token-consumption-report.md — bash-only workflow with no github tools

… and tools.cli-proxy - Phase 1: Add mode: gh-proxy to 75 agentic workflows that had cli-proxy: true + github tools - Phase 2: Add cli-proxy: true to copilot-token-optimizer.md (had mode: gh-proxy already) - Phase 3: Add both cli-proxy: true + mode: gh-proxy to 23 non-smoke agentic workflows - Fix static-analysis-report.md YAML indentation issue - Recompile all 205 workflow lock files Result: 101/181 (55.8%) agentic workflows now use both tools.github.mode: gh-proxy and tools.cli-proxy: true Agent-Logs-Url: https://github.com/github/gh-aw/sessions/fb7680c0-8a54-420e-a4cb-618213e1ae66 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-05-01T02:13:16Z

@copilot review the prompts to make sure they align with using gh instead of MCP tools

Workflows with mode: gh-proxy should instruct agents to use 'gh' CLI since no GitHub MCP server is available in that mode. - copilot-opt: remove "Never use gh CLI" rule, replace with "Use gh CLI for GitHub reads" - copilot-opt: replace GitHub MCP get_pull_request reference with gh pr view/list - deployment-incident-monitor: replace "GitHub MCP tools" with gh CLI commands - daily-aw-cross-repo-compile-check: replace GitHub MCP search with gh search code - spec-enforcer: replace GitHub MCP server with gh pr list - stale-repo-identifier: replace all GitHub MCP tool references with gh CLI commands - sub-issue-closer: replace GitHub MCP server references with gh issue list - ubuntu-image-analyzer: replace GitHub MCP Tools section with gh CLI section - grumpy-reviewer: replace vague "GitHub tools" reference with explicit gh pr commands Agent-Logs-Url: https://github.com/github/gh-aw/sessions/010f8156-dc10-46a2-ab71-406f7eb02205 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-05-01T02:27:15Z

@copilot review the prompts to make sure they align with using gh instead of MCP tools

Reviewed all changed workflow prompts. Updated 8 workflows that had instructions conflicting with mode: gh-proxy behavior (where no GitHub MCP server is available and gh CLI is the primary tool for GitHub reads):

copilot-opt.md: Removed "Never use gh CLI" rule; replaced with "Use gh CLI for GitHub reads". Updated get_pull_request MCP reference → gh pr view/list.
deployment-incident-monitor.md: Replaced "GitHub MCP tools" with concrete gh run list / gh api commands.
daily-aw-cross-repo-compile-check.md: Replaced "GitHub MCP search tools" with gh search code / gh repo view.
spec-enforcer.md: Replaced "Use GitHub MCP server (not gh api calls)" with gh pr list.
stale-repo-identifier.md: Replaced all list_commits, search_issues, list_pull_requests, list_releases MCP tool references with equivalent gh CLI commands.
sub-issue-closer.md: Replaced "GitHub MCP server" references with gh issue list.
ubuntu-image-analyzer.md: Replaced "GitHub MCP Tools (Read-Only)" section with "gh CLI" section using gh run list / gh api.
grumpy-reviewer.md: Replaced vague "Use the GitHub tools" with explicit gh pr view / gh pr diff commands.

Commit: 45ff147

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw -d 168.63.129.16 bash --no�� --noprofile 53 rgo/bin/bash tead|use.*github/usr/bin/gh (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw -j ACCEPT e mcp github n==2�� .github/workflow-f (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv .github/workflows/developer-docs-consolidator.md (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /home/REDACTED/worremote.origin.url (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv github mcp|mcp.*-f (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv -n mcp\|use the.*tool\|use.*mcp 1/x64/bin/bash (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv github mcp|mcp.*github.*tool|useremote.origin.url (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv h ../../../.prettierignore (http block)
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv .*mcp.*github|github.*toolset.*mcp|issue_read|pull_request.*mcp|mcp.*tool.*get|list.*mcp security /sh tead|use.*githubgit -d 168.63.129.16 bash --no�� js/**/*.json' --ignore-path ../../../.prettierignore 53 ndor/bin/bash tead|use.*githubgit (http block)
https://api.github.com/repos/github/gh-aw
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch .js' --ignore-path .prettierigno-f (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

pelikhan · 2026-05-01T02:40:12Z

@lpcox

Copilot

Pull request overview

Migrates a large subset of agentic workflows to use tools.github.mode: gh-proxy alongside tools.cli-proxy: true, and updates select prompts/lockfiles to align runtime GitHub access with gh CLI via the CLI proxy.

Changes:

Added tools.github.mode: gh-proxy and/or tools.cli-proxy: true across many workflows to shift GitHub reads to gh CLI proxy mode.
Updated several workflow prompts to replace GitHub MCP-tool instructions with gh CLI equivalents where MCP won’t be available.
Recompiled workflow lock files to reflect the new tool configuration (and fixed a YAML indentation issue).

Show a summary per file

File	Description
.github/workflows/workflow-health-manager.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/workflow-generator.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/workflow-generator.lock.yml	Recompiled lockfile for `gh-proxy` + CLI proxy runtime wiring.
.github/workflows/weekly-safe-outputs-spec-review.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/weekly-issue-summary.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/weekly-blog-post-writer.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/visual-regression-checker.md	Enable CLI proxy.
.github/workflows/visual-regression-checker.lock.yml	Recompiled lockfile (but currently missing expected CLI proxy integration).
.github/workflows/video-analyzer.md	Enable CLI proxy.
.github/workflows/video-analyzer.lock.yml	Recompiled lockfile.
.github/workflows/unbloat-docs.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/ubuntu-image-analyzer.md	Enable CLI proxy + `gh-proxy`; update prompt guidance from MCP tools to `gh` CLI.
.github/workflows/typist.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/tidy.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/test-quality-sentinel.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/test-project-url-default.md	Enable CLI proxy.
.github/workflows/test-project-url-default.lock.yml	Recompiled lockfile.
.github/workflows/terminal-stylist.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/technical-doc-writer.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/sub-issue-closer.md	Enable CLI proxy + `gh-proxy`; update prompt guidance to `gh issue list` / `gh api`.
.github/workflows/step-name-alignment.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/static-analysis-report.md	Fix YAML indentation and set `tools.github.mode: gh-proxy`.
.github/workflows/stale-repo-identifier.md	Enable CLI proxy + `gh-proxy`; update prompt guidance to `gh` commands.
.github/workflows/spec-librarian.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/spec-extractor.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/spec-enforcer.md	Enable CLI proxy + `gh-proxy`; update prompt guidance to `gh pr list`.
.github/workflows/smoke-copilot.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/sergo.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/semantic-function-refactor.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/security-compliance.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/scout.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/safe-output-health.md	Enable CLI proxy.
.github/workflows/safe-output-health.lock.yml	Recompiled lockfile.
.github/workflows/repository-quality-improver.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/refiner.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/refactoring-cadence.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/q.md	Set `tools.github.mode: gh-proxy` (including docs/example snippet).
.github/workflows/prompt-clustering-analysis.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/pr-triage-agent.md	Enable CLI proxy + set GitHub tool mode to `gh-proxy`.
.github/workflows/pr-nitpick-reviewer.md	Enable CLI proxy.
.github/workflows/pr-nitpick-reviewer.lock.yml	Recompiled lockfile.
.github/workflows/poem-bot.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/plan.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/plan.lock.yml	Recompiled lockfile for CLI proxy + `gh-proxy` prompts.
.github/workflows/org-health-report.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/metrics-collector.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/mergefest.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/layout-spec-maintainer.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/jsweep.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/issue-monster.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/issue-arborist.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/instructions-janitor.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/hourly-ci-cleaner.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/grumpy-reviewer.md	Enable CLI proxy; update prompt guidance to use `gh pr view/diff`.
.github/workflows/grumpy-reviewer.lock.yml	Recompiled lockfile.
.github/workflows/go-logger.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/go-fan.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/glossary-maintainer.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/firewall-escape.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/example-workflow-analyzer.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/draft-pr-cleanup.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/discussion-task-miner.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/dictation-prompt.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/developer-docs-consolidator.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/dev-hawk.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/design-decision-gate.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/deployment-incident-monitor.md	Enable CLI proxy + `gh-proxy`; update prompt guidance to `gh` commands.
.github/workflows/deployment-incident-monitor.lock.yml	Recompiled lockfile for CLI proxy + `gh-proxy`.
.github/workflows/delight.md	Set `tools.github.mode: gh-proxy` (and docs snippet).
.github/workflows/deep-report.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/dead-code-remover.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-workflow-updater.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-testify-uber-super-expert.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-security-red-team.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-security-observability.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-secrets-analysis.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-secrets-analysis.lock.yml	Recompiled lockfile for CLI proxy + `gh-proxy`.
.github/workflows/daily-safe-outputs-conformance.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-safe-output-integrator.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-repo-chronicle.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-rendering-scripts-verifier.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-performance-summary.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-otel-instrumentation-advisor.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-observability-report.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-mcp-concurrency-analysis.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-issues-report.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-hippo-learn.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-function-namer.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-file-diet.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-fact.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-doc-updater.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-doc-healer.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-compiler-quality.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-cli-performance.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-choice-test.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-caveman-optimizer.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-cache-strategy-analyzer.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-aw-cross-repo-compile-check.md	Enable CLI proxy + `gh-proxy`; update search guidance to `gh search code` / `gh repo view`.
.github/workflows/daily-assign-issue-to-user.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/daily-assign-issue-to-user.lock.yml	Recompiled lockfile for CLI proxy + `gh-proxy`.
.github/workflows/craft.md	Set `tools.github.mode: gh-proxy` in workflow + embedded example snippet.
.github/workflows/copilot-token-optimizer.md	Add missing `tools.cli-proxy: true` for `gh-proxy` mode.
.github/workflows/copilot-token-optimizer.lock.yml	Recompiled lockfile for CLI proxy + `gh-proxy`.
.github/workflows/copilot-session-insights.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/copilot-opt.md	Enable CLI proxy + `gh-proxy`; update prompt guidance to prefer `gh` reads.
.github/workflows/copilot-cli-deep-research.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/contribution-check.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/contribution-check.lock.yml	Recompiled lockfile for CLI proxy + `gh-proxy`.
.github/workflows/commit-changes-analyzer.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/code-scanning-fixer.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/claude-code-user-docs-review.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/ci-doctor.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/breaking-change-checker.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/aw-failure-investigator.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/auto-triage-issues.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/artifacts-summary.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/artifacts-summary.lock.yml	Recompiled lockfile for CLI proxy + `gh-proxy`.
.github/workflows/archie.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/approach-validator.md	Set `tools.github.mode: gh-proxy`.
.github/workflows/agent-performance-analyzer.md	Set `tools.github.mode: gh-proxy`.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 94/212 changed files
Comments generated: 3

 3. If `rotation.json` is missing or empty, recover round-robin state from the most recently merged PR with the `pkg-specifications` label:
- - Use the GitHub MCP server (not direct `gh api` calls) to find the latest merged PR in this repository with a query equivalent to:
- - `repo:${{ github.repository }} is:pr is:merged label:pkg-specifications sort:merged-desc`
+ - Use `gh pr list --repo ${{ github.repository }} --state merged --label pkg-specifications --limit 1 --json number,body` to find the latest merged PR in this repository
 - Parse this line from the PR body:


+Use `gh api repos/<owner>/<repo>/commits?per_page=100&since=<2-years-ago>` to get commit history:
+```bash
+gh api repos/<owner>/<repo>/commits --paginate --jq '.[].commit.author.date'
 ```


+# gh-aw-metadata: {"schema_version":"v3","frontmatter_hash":"f45b4d827b2deecb4116b542c0f5ce224b31b1f4d6f06daec319418fe0d048f3","strict":true,"agent_id":"copilot"}
 # gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","version":"v6"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"373c709c69115d41ff229c7e5df9f8788daa9553","version":"v9"},{"repo":"actions/setup-node","sha":"48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e","version":"v6.4.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.25.29","digest":"sha256:e68f37e36962dcb3f3d1de680a49bc2302cefd001b941a7dc377155ec7ce42f4","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.25.29@sha256:e68f37e36962dcb3f3d1de680a49bc2302cefd001b941a7dc377155ec7ce42f4"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.29","digest":"sha256:d1219e4110684402aabbeb5a43858f26790c9d0be210581cf3f7a521bd2c87b6","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.29@sha256:d1219e4110684402aabbeb5a43858f26790c9d0be210581cf3f7a521bd2c87b6"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.25.29","digest":"sha256:8a71ad9e40454051672312917e51567abfb8251d7c294d086c48f63d84e4cb53","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.25.29@sha256:8a71ad9e40454051672312917e51567abfb8251d7c294d086c48f63d84e4cb53"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.1","digest":"sha256:287fad0236959f3b3d9936ea1ef8d5b4f135ef2a5f5789713495cbbef191e60c","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.1@sha256:287fad0236959f3b3d9936ea1ef8d5b4f135ef2a5f5789713495cbbef191e60c"},{"image":"ghcr.io/github/github-mcp-server:v1.0.3","digest":"sha256:2ac27ef03461ef2b877031b838a7d1fd7f12b12d4ace7796d8cad91446d55959","pinned_image":"ghcr.io/github/github-mcp-server:v1.0.3@sha256:2ac27ef03461ef2b877031b838a7d1fd7f12b12d4ace7796d8cad91446d55959"},{"image":"mcr.microsoft.com/playwright/mcp","digest":"sha256:7b82f29c6ef83480a97f612d53ac3fd5f30a32df3fea1e06923d4204d3532bb2","pinned_image":"mcr.microsoft.com/playwright/mcp@sha256:7b82f29c6ef83480a97f612d53ac3fd5f30a32df3fea1e06923d4204d3532bb2"},{"image":"node:lts-alpine","digest":"sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f","pinned_image":"node:lts-alpine@sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f"}]}


CopilotAI assigned Copilot and pelikhan May 1, 2026

Copilotcreated this pull request from a session on behalf of pelikhan May 1, 2026 02:11 View session

Copilotfinished work on behalf of pelikhan May 1, 2026 02:13

CopilotAI requested a review from pelikhan May 1, 2026 02:13

Copilotstarted work on behalf of pelikhan May 1, 2026 02:13 View session

Copilotfinished work on behalf of pelikhan May 1, 2026 02:28

pelikhan marked this pull request as ready for review May 1, 2026 02:40

CopilotAI review requested due to automatic review settings May 1, 2026 02:40

pelikhan merged commit b4a5fc6 into mainMay 1, 2026
25 checks passed

pelikhan deleted the copilot/convert-agentic-workflows-to-proxies branch May 1, 2026 02:40

Copilotstarted reviewing on behalf of pelikhan May 1, 2026 02:41 View session

CopilotAI reviewed May 1, 2026
View reviewed changes

Navigation Menu

Uh oh!

Convert 55.8% of agentic workflows to use tools.github mode: gh-proxy and tools.cli-proxy - #29418

Convert 55.8% of agentic workflows to use tools.github mode: gh-proxy and tools.cli-proxy#29418
pelikhan merged 2 commits into
mainfrom
copilot/convert-agentic-workflows-to-proxies

CopilotAI commented May 1, 2026•
edited
Loading

Uh oh!

pelikhan commented May 1, 2026

Uh oh!

CopilotAI commented May 1, 2026•
edited
Loading

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

pelikhan commented May 1, 2026

Uh oh!

Uh oh!

CopilotAI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

		# gh-aw-metadata: {"schema_version":"v3","frontmatter_hash":"f45b4d827b2deecb4116b542c0f5ce224b31b1f4d6f06daec319418fe0d048f3","strict":true,"agent_id":"copilot"}
		# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","version":"v6"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"373c709c69115d41ff229c7e5df9f8788daa9553","version":"v9"},{"repo":"actions/setup-node","sha":"48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e","version":"v6.4.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.25.29","digest":"sha256:e68f37e36962dcb3f3d1de680a49bc2302cefd001b941a7dc377155ec7ce42f4","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.25.29@sha256:e68f37e36962dcb3f3d1de680a49bc2302cefd001b941a7dc377155ec7ce42f4"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.29","digest":"sha256:d1219e4110684402aabbeb5a43858f26790c9d0be210581cf3f7a521bd2c87b6","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.29@sha256:d1219e4110684402aabbeb5a43858f26790c9d0be210581cf3f7a521bd2c87b6"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.25.29","digest":"sha256:8a71ad9e40454051672312917e51567abfb8251d7c294d086c48f63d84e4cb53","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.25.29@sha256:8a71ad9e40454051672312917e51567abfb8251d7c294d086c48f63d84e4cb53"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.1","digest":"sha256:287fad0236959f3b3d9936ea1ef8d5b4f135ef2a5f5789713495cbbef191e60c","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.1@sha256:287fad0236959f3b3d9936ea1ef8d5b4f135ef2a5f5789713495cbbef191e60c"},{"image":"ghcr.io/github/github-mcp-server:v1.0.3","digest":"sha256:2ac27ef03461ef2b877031b838a7d1fd7f12b12d4ace7796d8cad91446d55959","pinned_image":"ghcr.io/github/github-mcp-server:v1.0.3@sha256:2ac27ef03461ef2b877031b838a7d1fd7f12b12d4ace7796d8cad91446d55959"},{"image":"mcr.microsoft.com/playwright/mcp","digest":"sha256:7b82f29c6ef83480a97f612d53ac3fd5f30a32df3fea1e06923d4204d3532bb2","pinned_image":"mcr.microsoft.com/playwright/mcp@sha256:7b82f29c6ef83480a97f612d53ac3fd5f30a32df3fea1e06923d4204d3532bb2"},{"image":"node:lts-alpine","digest":"sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f","pinned_image":"node:lts-alpine@sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f"}]}

Uh oh!

Conversation

CopilotAI commented May 1, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Changes

Result

Prompt Updates

Workflows NOT converted (intentionally excluded)

Uh oh!

pelikhan commented May 1, 2026

Uh oh!

CopilotAI commented May 1, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

pelikhan commented May 1, 2026

Uh oh!

Uh oh!

CopilotAI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

CopilotAI commented May 1, 2026•
edited
Loading

CopilotAI commented May 1, 2026•
edited
Loading