chore: bump AWF from v0.25.18 to v0.25.20 by Copilot · Pull Request #26041 · github/gh-aw

Copilot · 2026-04-13T13:44:48Z

Routine version bump of the Agent Workflow Firewall (AWF) binary.

Changes

pkg/constants/version_constants.go — DefaultFirewallVersion: v0.25.18 → v0.25.20
187 lock files — recompiled; firewall image tags (agent, api-proxy, squid) updated from 0.25.18 → 0.25.20

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/66ab5ca4-3f88-4740-be3f-bb4c584b4a3d Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

lpcox · 2026-04-13T13:53:58Z

@copilot bump to v0.25.20

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/66ab5ca4-3f88-4740-be3f-bb4c584b4a3d Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/4b252026-d647-45a7-8df7-c001920251a4 Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot · 2026-04-13T14:03:28Z

@copilot bump to v0.25.20

Done — bumped to v0.25.20 and recompiled all 187 lock files in ce4f2ec.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw -embedcfg /tmp/go-build1521536804/b063/embedcfg -pack (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v7
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v7 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v7 --jq .object.sha logs/command.sh (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v7 --jq .object.sha mmit} (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha (http block)
https://api.github.com/repos/docker/build-push-action/git/ref/tags/v7
- Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v7 --jq .object.sha (http block)
https://api.github.com/repos/githubnext/agentics/git/ref/tags/-
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/- --jq .object.sha (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Copilot

Pull request overview

Routine bump of the Agent Workflow Firewall (AWF) version used by this repo’s tooling and generated GitHub Actions workflows.

Changes:

Bump DefaultFirewallVersion from v0.25.18 to v0.25.20.
Recompile workflow lock files to reference 0.25.20 firewall container tags and v0.25.20 AWF binary installs.

Show a summary per file

File	Description
pkg/constants/version_constants.go	Updates the default AWF binary version to `v0.25.20`.
.github/workflows/workflow-generator.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/test-workflow.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/schema-feature-coverage.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/refiner.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/pr-triage-agent.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/plan.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/metrics-collector.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/issue-triage-agent.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/gpclean.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/github-remote-mcp-auth-test.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/firewall.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/example-permissions-warning.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/dev.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/daily-malicious-code-scan.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/contribution-check.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/codex-github-remote-mcp-test.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/code-simplifier.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/changeset.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/bot-detection.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/ai-moderator.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.
.github/workflows/ace-editor.lock.yml	Updates workflow lock to use AWF `v0.25.20` and firewall image tags `0.25.20`.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 65/188 changed files
Comments generated: 2

Copilot · 2026-04-13T14:40:01Z

.github/workflows/workflow-generator.lock.yml

@@ -1,5 +1,5 @@
 # gh-aw-metadata: {"schema_version":"v3","frontmatter_hash":"cfd7f6135eab81d11cbd703b3436241bc379da2ede370ecb3285f2186bde6d06","strict":true,"agent_id":"copilot"}
-# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_AGENT_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","version":"v6.0.2"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"373c709c69115d41ff229c7e5df9f8788daa9553","version":"v9"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.25.18","digest":"sha256:c77e8c26bab6c39e8568d8e2f8c17015944849a8cbcdfb4bd9725d8893725ca2","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.25.18@sha256:c77e8c26bab6c39e8568d8e2f8c17015944849a8cbcdfb4bd9725d8893725ca2"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.18","digest":"sha256:d16a40a3ca6e989896d0cef9f31b9412bb1fcc8755bafcafb95012ae1078539b","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.18@sha256:d16a40a3ca6e989896d0cef9f31b9412bb1fcc8755bafcafb95012ae1078539b"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.25.18","digest":"sha256:eb102afcfbae26ffcec016adebb74d3be7b0a5bf376ba306599cdf3effbe288e","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.25.18@sha256:eb102afcfbae26ffcec016adebb74d3be7b0a5bf376ba306599cdf3effbe288e"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.2.17","digest":"sha256:a6dec6ec535a11c565d982afa2f98589805ed0598862b9ea9d3c751fc71afae8","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.2.17@sha256:a6dec6ec535a11c565d982afa2f98589805ed0598862b9ea9d3c751fc71afae8"},{"image":"ghcr.io/github/github-mcp-server:v0.32.0","digest":"sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28","pinned_image":"ghcr.io/github/github-mcp-server:v0.32.0@sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28"},{"image":"node:lts-alpine","digest":"sha256:01743339035a5c3c11a373cd7c83aeab6ed1457b55da6a69e014a95ac4e4700b","pinned_image":"node:lts-alpine@sha256:01743339035a5c3c11a373cd7c83aeab6ed1457b55da6a69e014a95ac4e4700b"}]}
+# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_AGENT_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","version":"v6.0.2"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"373c709c69115d41ff229c7e5df9f8788daa9553","version":"v9"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.25.20"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.20"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.25.20"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.2.17","digest":"sha256:a6dec6ec535a11c565d982afa2f98589805ed0598862b9ea9d3c751fc71afae8","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.2.17@sha256:a6dec6ec535a11c565d982afa2f98589805ed0598862b9ea9d3c751fc71afae8"},{"image":"ghcr.io/github/github-mcp-server:v0.32.0","digest":"sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28","pinned_image":"ghcr.io/github/github-mcp-server:v0.32.0@sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28"},{"image":"node:lts-alpine","digest":"sha256:01743339035a5c3c11a373cd7c83aeab6ed1457b55da6a69e014a95ac4e4700b","pinned_image":"node:lts-alpine@sha256:01743339035a5c3c11a373cd7c83aeab6ed1457b55da6a69e014a95ac4e4700b"}]}


The gh-aw-manifest container entries for the gh-aw-firewall images no longer include resolved digests / pinned_image fields (they’re now tag-only, e.g. ghcr.io/github/gh-aw-firewall/agent:0.25.20). This weakens the repository’s intended deterministic, supply-chain-safe container pinning (see pkg/workflow/docker.go:14-17 and pkg/workflow/action_cache.go:30-32). Please update the container pin cache (typically .github/aw/actions-lock.json) to include the 0.25.20 digests and recompile so the lock file records @sha256 pins for these images.

This issue also appears on line 418 of the same file.

Copilot · 2026-04-13T14:40:01Z

.github/workflows/test-workflow.lock.yml

@@ -1,5 +1,5 @@
 # gh-aw-metadata: {"schema_version":"v3","frontmatter_hash":"c1289924ef5c241c6bf7aede9e9822e6fe5e48cd5d6242834bb75725a19e6fd8","strict":true,"agent_id":"copilot"}
-# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","version":"v6.0.2"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"373c709c69115d41ff229c7e5df9f8788daa9553","version":"v9"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.25.18","digest":"sha256:c77e8c26bab6c39e8568d8e2f8c17015944849a8cbcdfb4bd9725d8893725ca2","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.25.18@sha256:c77e8c26bab6c39e8568d8e2f8c17015944849a8cbcdfb4bd9725d8893725ca2"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.18","digest":"sha256:d16a40a3ca6e989896d0cef9f31b9412bb1fcc8755bafcafb95012ae1078539b","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.18@sha256:d16a40a3ca6e989896d0cef9f31b9412bb1fcc8755bafcafb95012ae1078539b"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.25.18","digest":"sha256:eb102afcfbae26ffcec016adebb74d3be7b0a5bf376ba306599cdf3effbe288e","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.25.18@sha256:eb102afcfbae26ffcec016adebb74d3be7b0a5bf376ba306599cdf3effbe288e"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.2.17","digest":"sha256:a6dec6ec535a11c565d982afa2f98589805ed0598862b9ea9d3c751fc71afae8","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.2.17@sha256:a6dec6ec535a11c565d982afa2f98589805ed0598862b9ea9d3c751fc71afae8"},{"image":"ghcr.io/github/github-mcp-server:v0.32.0","digest":"sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28","pinned_image":"ghcr.io/github/github-mcp-server:v0.32.0@sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28"}]}
+# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","version":"v6.0.2"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"373c709c69115d41ff229c7e5df9f8788daa9553","version":"v9"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.25.20"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.20"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.25.20"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.2.17","digest":"sha256:a6dec6ec535a11c565d982afa2f98589805ed0598862b9ea9d3c751fc71afae8","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.2.17@sha256:a6dec6ec535a11c565d982afa2f98589805ed0598862b9ea9d3c751fc71afae8"},{"image":"ghcr.io/github/github-mcp-server:v0.32.0","digest":"sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28","pinned_image":"ghcr.io/github/github-mcp-server:v0.32.0@sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28"}]}


The gh-aw-manifest header no longer includes digest/pinned_image information for the gh-aw-firewall images, leaving them tag-only. This reduces determinism and supply-chain integrity for compiled workflows; please ensure the 0.25.20 firewall images are digest-pinned via the container pin cache and then recompile the lock files.

This issue also appears on line 352 of the same file.

lpcox · 2026-04-13T15:22:06Z

Closing in favor of #25975 which includes SHA256 digest pins for all v0.25.20 container images.

Initial plan

54d49d9

Copilot AI assigned Copilot and lpcox Apr 13, 2026

Copilot AI linked an issue Apr 13, 2026 that may be closed by this pull request

chore: bump Agent Workflow Firewall (AWF) from v0.25.18 to v0.25.19 #25925

Closed

Copilot started work on behalf of lpcox April 13, 2026 13:44 View session

chore: bump AWF from v0.25.18 to v0.25.19

f930238

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/66ab5ca4-3f88-4740-be3f-bb4c584b4a3d Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

chore: recompile workflow lock files for AWF v0.25.19

16352e0

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/66ab5ca4-3f88-4740-be3f-bb4c584b4a3d Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Bump Agent Workflow Firewall from v0.25.18 to v0.25.19~~ chore: bump AWF from v0.25.18 to v0.25.19 Apr 13, 2026

Copilot finished work on behalf of lpcox April 13, 2026 13:58

Copilot AI requested a review from lpcox April 13, 2026 13:58

Copilot started work on behalf of lpcox April 13, 2026 13:58 View session

chore: bump AWF from v0.25.19 to v0.25.20

ce4f2ec

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/4b252026-d647-45a7-8df7-c001920251a4 Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot AI changed the title ~~chore: bump AWF from v0.25.18 to v0.25.19~~ chore: bump AWF from v0.25.18 to v0.25.20 Apr 13, 2026

Copilot finished work on behalf of lpcox April 13, 2026 14:04

lpcox marked this pull request as ready for review April 13, 2026 14:34

Copilot AI review requested due to automatic review settings April 13, 2026 14:34

Copilot started reviewing on behalf of lpcox April 13, 2026 14:35 View session

github-actions bot mentioned this pull request Apr 13, 2026

[aw] No-Op Runs #25214

Open

Copilot AI reviewed Apr 13, 2026

View reviewed changes

lpcox closed this Apr 13, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: bump AWF from v0.25.18 to v0.25.20#26041

chore: bump AWF from v0.25.18 to v0.25.20#26041
Copilot wants to merge 4 commits intomainfrom
copilot/bump-agent-workflow-firewall-version

Copilot AI commented Apr 13, 2026 •

edited

Loading

Uh oh!

lpcox commented Apr 13, 2026

Uh oh!

Copilot AI commented Apr 13, 2026 •

edited

Loading

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Apr 13, 2026

Uh oh!

Copilot AI Apr 13, 2026

Uh oh!

lpcox commented Apr 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

Copilot AI commented Apr 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Uh oh!

lpcox commented Apr 13, 2026

Uh oh!

Copilot AI commented Apr 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Copilot AI Apr 13, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 13, 2026

Choose a reason for hiding this comment

Uh oh!

lpcox commented Apr 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Apr 13, 2026 •

edited

Loading

Copilot AI commented Apr 13, 2026 •

edited

Loading