From 46740afd6ece15ba18804ccb236a76b424bbd26c Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 19 Aug 2026 22:46:42 +0000
Subject: [PATCH 1/2] Initial plan


From 7ca0c63aff0dd553a61728741520e2fdfffffc35 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 19 Aug 2026 22:55:17 +0000
Subject: [PATCH 2/2] test: update strict no-shell workflow fixtures

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
---
 pkg/workflow/guard_policy_compilation_integration_test.go | 1 +
 pkg/workflow/strict_mode_test.go                          | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/pkg/workflow/guard_policy_compilation_integration_test.go b/pkg/workflow/guard_policy_compilation_integration_test.go
index 6dfe0d8c41c..01318fa234b 100644
--- a/pkg/workflow/guard_policy_compilation_integration_test.go
+++ b/pkg/workflow/guard_policy_compilation_integration_test.go
@@ -55,6 +55,7 @@ permissions:
   contents: read
 tools:
   bash: false
+  cli-proxy: false
   github:
     repos: public
     min-integrity: none
diff --git a/pkg/workflow/strict_mode_test.go b/pkg/workflow/strict_mode_test.go
index 92681c53a80..b79c38226d1 100644
--- a/pkg/workflow/strict_mode_test.go
+++ b/pkg/workflow/strict_mode_test.go
@@ -380,6 +380,7 @@ tools:
   github:
     allowed: [issue_read]
   bash: []
+  cli-proxy: false
 ---
 
 # Test Workflow`,
@@ -449,6 +450,7 @@ timeout-minutes: 10
 engine: copilot
 tools:
   bash: []
+  cli-proxy: false
 ---
 
 # Test Workflow`,
@@ -466,6 +468,7 @@ timeout-minutes: 10
 engine: copilot
 tools:
   bash: []
+  cli-proxy: false
 ---
 
 # Test Workflow`,