ERR_VALIDATION: Secret redaction failed: ERR_VALIDATION: Failed to scan directory /tmp/gh-aw: ERR_VALIDATION: Failed to scan directory /tmp/gh-aw/aw-mcp: Maximum call stack size exceeded`\\n- Run [35947503250](https://github.com/github/gh-aw/actions/runs/35947503250) (2026-09-24T02:56Z): identical error, same directory (`/tmp/gh-aw/aw-mcp`), same `Maximum call stack size exceeded`.\\n\\nThis crashes the `agent` job post-execution even though the actual agent work (discussion creation) already succeeded — i.e. a **false-negative failure report** masking a healthy run. The stack overflow strongly suggests a symlink loop or deeply-recursive directory structure under `/tmp/gh-aw/aw-mcp` (likely an MCP-gateway working directory specific to this workflow's tool config) that the AWF firewall's secret-redaction directory scanner doesn't guard against (no cycle/depth detection). This is infrastructure-level (AWF firewall action), not this repo's own compiled workflow code — `actions/setup/js/redact_secrets.cjs` in this repo doesn't reference `aw-mcp` directly, so the scanning logic lives in the external AWF firewall action.\\n\\n**Suggested fix direction:** report upstream to the AWF firewall maintainers to add symlink-loop/max-depth guards to the secret-redaction directory walker, or (as a repo-side mitigation) investigate whether `daily-firewall-report.md`'s tool config creates a self-referential/deeply nested directory under `/tmp/gh-aw/aw-mcp` that other workflows don't.\\n\\n**Impact:** daily-firewall-report is functionally producing correct output (discussion created both days) but reported as a hard failure both days, inflating the workflow's apparent failure rate and triggering unnecessary `[aw] ... failed` issues (#63332, and yesterday's equivalent).\\n\\n## Compilation status\\n298/298 workflows have lock files (100%), compile-validate clean — unchanged.\\n\\n## Live re-verification of failing-workflows.json (4 entries)\\n- **daily-firewall-report**: 2 consecutive failures (see finding #2 above) — was previously reported as \\\"intermittent\\\"/recovered; now confirmed as a recurring, specific, previously-undiagnosed crash.\\n- **daily-go-test-parallelizer**: fully healthy (5/5 recent runs successful).\\n- **lint-monster**: fully healthy (4/4 most recent runs successful, only 2 stale failures from 2026-09-20/21 in the window).\\n- **cjs**: plain GH Actions CI workflow, out of `gh aw` scope — unchanged.\\n\\n## Carried-over unfixed items (re-confirmed, see comment on #63098)\\n- avenger.md npm-symlink mount, metrics-collector.md missing `model-provider: github`, gpclean.md retired `gpt-5-codex` model — all 3 reproduced again today via live logs, no fix PR yet despite Copilot assignment attempted 2026-09-24. See #63098 for full detail (comment added this run).\\n\\n\\u003e Generated by [🏥 Workflow Health Manager - Meta-Orchestrator](https://github.com/github/gh-aw/actions/runs/36095116985) · copilot · auto · 118.9 AIC · ⌖ 11.1 AIC · ⊞ 12.3K · [◷](https://github.com/search?q=repo%3Agithub%2Fgh-aw+is%3Aissue+%22gh-aw-workflow-call-id%3A+github%2Fgh-aw%2Fworkflow-health-manager%22\\u0026type=issues)\\n\\u003e - [x] expires \\u003c!-- gh-aw-expires: 2026-09-26T04:46:18.723Z --\\u003e on Sep 25, 2026, 8:46 PM UTC-08:00\\n\\n\\u003c!-- gh-aw-agentic-workflow: Workflow Health Manager - Meta-Orchestrator, engine: copilot, model: auto, id: 36095116985, workflow_id: workflow-health-manager, run: https://github.com/github/gh-aw/actions/runs/36095116985 --\\u003e\\n\\n\\u003c!-- gh-aw-workflow-id: workflow-health-manager --\\u003e\\n\\u003c!-- gh-aw-workflow-call-id: github/gh-aw/workflow-health-manager --\\u003e\",\"closed_by_pull_requests\":{\"references\":[],\"total_count\":0},\"created_at\":\"2026-09-25T04:46:19Z\",\"has_children\":false,\"has_parent\":true,\"html_url\":\"https://github.com/github/gh-aw/issues/63348\",\"labels\":[\"workflow-health\",\"priority-p1\",\"type-failure\",\"cookie\"],\"number\":63348,\"parent\":{\"number\":47195,\"repository\":\"github/gh-aw\",\"state\":\"OPEN\",\"title\":\"Wo

Unable to download artifact(s): Artifact not found for name: safe-outputs-upload-artifacts Please ensure that your artifact is not expired and the artifact was uploaded using a compatible version of toolkit/upload-artifact. For more information, visit the GitHub Artifacts FAQ: https://github.com/actions/toolkit/blob/main/packages/artifact/docs/faq.md

Unable to download artifact(s): Artifact not found for name: repo-memory-default Please ensure that your artifact is not expired and the artifact was uploaded using a compatible version of toolkit/upload-artifact. For more information, visit the GitHub Artifacts FAQ: https://github.com/actions/toolkit/blob/main/packages/artifact/docs/faq.md

Removed symbolic link before artifact upload: /tmp/gh-aw/latest

Title dedup search (recently closed issues) truncated for github/gh-aw: fetched 200 of 5512 results (cap 2 pages)

Title dedup search (open issues) truncated for github/gh-aw: fetched 200 of 411 results (cap 2 pages)

Removed symbolic link before artifact upload: /tmp/gh-aw/latest

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"