Skip to content

Align nine workflow tool allowlists and warn on denied prompt tools #66554

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
pelikhan merged 9 commits into from
Oct 7, 2026
Merged

Align nine workflow tool allowlists and warn on denied prompt tools #66554

Show file tree
Hide file tree
Changes from 2 commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
a26f800
Initial plan
Copilot Oct 7, 2026
6974129
Align nine workflow tool permissions and warn on denied prompt tools
Copilot Oct 7, 2026
d75287d
docs(adr): add draft ADR-66554 for advisory prompt tool validation
github-actions[bot] Oct 7, 2026
64b5fb7
Classify stalled Codex MCP calls as transport wedges (#66303)
Copilot Oct 7, 2026
530e7ad
Stop Codex resume retries after invalid request-body rejection (#66553)
Copilot Oct 7, 2026
4682a78
Blog Auditor: add agentic-workflows MCP tool for snippet validation (…
Copilot Oct 7, 2026
299fbbd
Fix prompt tool validation review findings
Copilot Oct 7, 2026
c20f9b3
Address follow-up prompt validation findings
Copilot Oct 7, 2026
077b9f1
Merge latest main
Copilot Oct 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 4 additions & 3 deletions .github/workflows/code-scanning-fixer.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

8 changes: 5 additions & 3 deletions .github/workflows/code-scanning-fixer.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ imports:
- shared/graders.md
tools:
cli-proxy: true
bash: ["cat:*", "git diff:*", "git diff --binary --no-ext-diff | wc -c", "git restore:*", "git status:*", grep, "head:*", jq, ls, "sed:*", tail, wc]
bash: ["cat:*", cut, "git diff:*", "git diff --binary --no-ext-diff | wc -c", "git restore:*", "git status:*", grep, "head:*", jq, ls, "sed:*", tail, wc]
github:
mode: local
github-token: "${{ secrets.GITHUB_TOKEN }}"
Expand Down Expand Up @@ -114,6 +114,8 @@ Your goal is to:

## Workflow Steps

Use native edit tools for writing cache records and report bodies rather than shell heredocs. Safe outputs are CLI-mounted: invoke `safeoutputs <tool>` through bash (use `--help` for parameters), not an invented native safe-output tool.

Copilot AI Oct 7, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All safe-output actions now use the CLI-mounted safeoutputs command through bash, including create-pull-request, create-issue, and noop. Fixed in c20f9b3.


### 1. Check Cache for Previously Fixed, Oversized, or Stalled Alerts

Before selecting an alert, check the cache memory for prior outcomes:
Expand All @@ -131,7 +133,7 @@ Before selecting an alert, check the cache memory for prior outcomes:

### 2. List All Open Alerts

Use `list_code_scanning_alerts` to list all open code scanning alerts.
Run `github list_code_scanning_alerts` through bash to list all open code scanning alerts. The GitHub CLI wrapper is available; do not invent a `github-list_code_scanning_alerts` tool name.

Copilot AI Oct 7, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All GitHub reads now use the CLI-mounted github wrapper, and checked-out files are read through allowed shell readers; native GitHub MCP and get_file_contents guidance was removed. Fixed in c20f9b3.

- Sort the results in reverse importance/severity priority (highest first)
- Use `rule.security_severity_level` when available (`critical > high > medium > low`)
- Fall back to alert/rule severity when no security severity is present (`error > warning > note`)
Expand All @@ -156,7 +158,7 @@ Immediately after selecting the alert, and **before** doing any analysis or fix

### 4. Get Alert Details

Get detailed information about the selected alert using `get_code_scanning_alert`.
Get detailed information about the selected alert using `github get_code_scanning_alert` through bash.
- Extract key information:
- Alert number
- Severity level (critical, high, medium, low, warning, note, or error)
Expand Down
Loading
Loading