Suppress benign Ollama RGS-012 findings by Copilot · Pull Request #52050 · github/gh-aw

Copilot · 2026-08-11T13:01:05Z

Runner Guard misclassified three localhost-only Ollama requests as potential secret exfiltration.

Workflow
- Add scoped RGS-012 annotations to Ollama readiness and warm-up requests.
- Regenerate the compiled workflow.
Scanner integration
- Honor exact rule annotations within the attributed workflow step.
- Preserve findings for mismatched or prefix-colliding rule IDs.

# runner-guard:ignore RGS-012 -- localhost-only probe; no secrets are sent.

Fixes[static-analysis] RGS-012: Secret Exfiltration via Outbound HTTP Request in daily-byok-ollama-test.lock.yml #51944

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 8.97 AIC · ⌖ 6.37 AIC · ⊞ 8.5K · ◷
_{Comment /souschef to run again}

github-actions · 2026-08-11T13:19:15Z

Hey @Copilot 👋 — thanks for taking on the RGS-012 runner-guard security fix! This is important work.

I see this is still in draft with the planning checklist in progress. A few things to track as you move forward:

No code changes yet — The PR currently has 0 changed files and 0 additions/deletions. Once you add the RGS-012 suppressions to .github/workflows/daily-byok-ollama-test.lock.yml and recompile the lock-file, this will be populated.
Add tests — Once the suppressions are in place, consider adding validation tests to ensure the runner-guard suppressions work as intended (e.g., that the three localhost-only Ollama requests are correctly exempted from RGS-012 checks).
Follow the checklist — The PR checklist looks solid; make sure all four items are completed and verified before moving out of draft.

When you're ready to move this out of draft:

1. Add narrowly justified RGS-012 suppressions to `.github/workflows/daily-byok-ollama-test.lock.yml` for the three localhost-only Ollama requests (lines 488, 496, 501).
2. Recompile the workflow lock-file to verify suppressions are correctly integrated.
3. Run runner-guard and repository validation to confirm the RGS-012 findings are resolved.
4. Verify no other security issues are introduced by the changes.

Generated by ✅ Contribution Check · auto · 49.6 AIC · ⌖ 3.67 AIC · ⊞ 8.8K · ◷

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-08-11T13:43:33Z

@copilot resolve the merge conflicts on this branch.

Copilot

Pull request overview

Adds scoped Runner Guard suppressions for benign localhost-only Ollama requests and introduces generic annotation filtering.

Changes:

Adds exact-rule suppression filtering within workflow steps.
Tests matching and mismatched rule IDs.
Annotates and recompiles the Ollama workflow.

Show a summary per file

File	Description
`pkg/cli/runner_guard.go`	Integrates annotation filtering.
`pkg/cli/runner_guard_gvisor_exfiltration.go`	Implements suppression detection.
`pkg/cli/runner_guard_gvisor_exfiltration_test.go`	Tests rule matching behavior.
`.github/workflows/daily-byok-ollama-test.md`	Annotates three localhost requests.
`.github/workflows/daily-byok-ollama-test.lock.yml`	Regenerates the compiled workflow.

Review details

Files reviewed: 5/5 changed files
Comments generated: 3
Review effort level: Balanced

+	for i := findingIndex; i >= 0; i-- {
+ trimmed := strings.TrimLeft(lines[i], " ")
+ if strings.HasPrefix(trimmed, "- ") {
+ stepStart = i
+ stepIndent = len(lines[i]) - len(trimmed)


+ if i > stepStart && indent == stepIndent && strings.HasPrefix(trimmed, "- ") {
+ break
+ }
+ annotationIndex := strings.Index(lines[i], annotation)


+ {RuleID: "RGS-012", File: "annotated.lock.yml", Line: 11},
+ {RuleID: "RGS-018", File: "annotated.lock.yml", Line: 11},


pelikhan · 2026-08-11T13:49:47Z

@copilot resolve the merge conflicts on this branch.

…ecret-exfiltration # Conflicts: # .github/workflows/daily-byok-ollama-test.lock.yml Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-08-11T13:59:21Z

@copilot resolve the merge conflicts on this branch.

Resolved in d7a0b96. Only the compiled daily-byok-ollama-test.lock.yml conflicted; the .md source merged cleanly with the RGS-012 annotations intact, and I regenerated the lock file with make recompile.

…ecret-exfiltration Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-08-11T14:07:45Z

@copilot resolve the merge conflicts on this branch.

Resolved in the latest merge commit. main had moved further ahead but this time it merged cleanly with no conflicts.

pelikhan · 2026-08-11T16:01:27Z

@copilot resolve the merge conflicts on this branch.

…ecret-exfiltration # Conflicts: # .github/workflows/daily-byok-ollama-test.lock.yml # .github/workflows/daily-byok-ollama-test.md Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-08-11T16:21:14Z

@copilot resolve the merge conflicts on this branch.

Resolved in 12f384f. main had already merged a similar fix (#52083) with slightly different wording for the same three daily-byok-ollama-test.md annotations; kept that upstream wording and regenerated the lock file.

gh-aw-bot · 2026-08-11T16:51:37Z

@copilot please review the remaining feedback, refresh the branch if needed, rerun the relevant validation, and use the pr-finisher skill before handing back.

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 8.97 AIC · ⌖ 6.37 AIC · ⊞ 8.5K · ◷
_{Comment /souschef to run again}

Initial plan
228b1f7

CopilotAI assigned Copilot and pelikhan Aug 11, 2026

CopilotAI linked an issue Aug 11, 2026 that may be closed by this pull request
[static-analysis] RGS-012: Secret Exfiltration via Outbound HTTP Request in daily-byok-ollama-test.lock.yml #51944
Closed

Copilotstarted work on behalf of pelikhan August 11, 2026 13:01 View session

github-actionsBot mentioned this pull request Aug 11, 2026
[Contribution Check Report] Contribution Check — 2026-08-11 #51900
Closed

Suppress benign Ollama runner-guard findings
d664422
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

CopilotAI changed the title ~~[WIP] Fix secret exfiltration via outbound HTTP request~~Suppress benign Ollama RGS-012 findingsAug 11, 2026

CopilotAI requested a review from pelikhan August 11, 2026 13:36

Copilotfinished work on behalf of pelikhan August 11, 2026 13:36

pelikhan approved these changes Aug 11, 2026
View reviewed changes

pelikhan marked this pull request as ready for review August 11, 2026 13:43

CopilotAI balanced review requested due to automatic review settings August 11, 2026 13:43

Copilotstarted reviewing on behalf of pelikhan August 11, 2026 13:43 View session

CopilotAI reviewed Aug 11, 2026
View reviewed changes

Copilotstarted work on behalf of pelikhan August 11, 2026 13:48 View session

Merge remote-tracking branch 'origin/main' into copilot/rgs-012-fix-s…
d7a0b96
…ecret-exfiltration # Conflicts: # .github/workflows/daily-byok-ollama-test.lock.yml Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilotfinished work on behalf of pelikhan August 11, 2026 13:59

CopilotAI requested a review from pelikhan August 11, 2026 13:59

Copilotstarted work on behalf of pelikhan August 11, 2026 14:00 View session

Merge remote-tracking branch 'origin/main' into copilot/rgs-012-fix-s…
40a54d5
…ecret-exfiltration Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilotfinished work on behalf of pelikhan August 11, 2026 14:08

Copilotstarted work on behalf of pelikhan August 11, 2026 16:09 View session

Merge remote-tracking branch 'origin/main' into copilot/rgs-012-fix-s…
12f384f
…ecret-exfiltration # Conflicts: # .github/workflows/daily-byok-ollama-test.lock.yml # .github/workflows/daily-byok-ollama-test.md Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilotfinished work on behalf of pelikhan August 11, 2026 16:21

github-actionsBot mentioned this pull request Aug 11, 2026
[pr-sous-chef] PR Sous Chef run report - 2026-08-11T01:46Z #51906
Closed

pelikhan closed this Aug 11, 2026

Navigation Menu

Uh oh!

Suppress benign Ollama RGS-012 findings - #52050

Suppress benign Ollama RGS-012 findings#52050
pelikhan with Copilot wants to merge 5 commits into
mainfrom
copilot/rgs-012-fix-secret-exfiltration

CopilotAI commented Aug 11, 2026•
edited by github-actions Bot
Loading

Uh oh!

github-actionsBot commented Aug 11, 2026

Uh oh!

pelikhan commented Aug 11, 2026

Uh oh!

CopilotAI left a comment

Uh oh!

pelikhan commented Aug 11, 2026

Uh oh!

CopilotAI commented Aug 11, 2026

Uh oh!

CopilotAI commented Aug 11, 2026

Uh oh!

pelikhan commented Aug 11, 2026

Uh oh!

CopilotAI commented Aug 11, 2026

Uh oh!

gh-aw-bot commented Aug 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

		{RuleID: "RGS-012", File: "annotated.lock.yml", Line: 11},
		{RuleID: "RGS-018", File: "annotated.lock.yml", Line: 11},

Uh oh!

Conversation

CopilotAI commented Aug 11, 2026• edited by github-actions BotLoading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented Aug 11, 2026

Uh oh!

pelikhan commented Aug 11, 2026

Uh oh!

CopilotAI left a comment

Choose a reason for hiding this comment

Pull request overview

Review details

Uh oh!

pelikhan commented Aug 11, 2026

Uh oh!

CopilotAI commented Aug 11, 2026

Uh oh!

CopilotAI commented Aug 11, 2026

Uh oh!

pelikhan commented Aug 11, 2026

Uh oh!

CopilotAI commented Aug 11, 2026

Uh oh!

gh-aw-bot commented Aug 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

CopilotAI commented Aug 11, 2026•
edited by github-actions Bot
Loading