feat: Enhance Security Agent Workflow with error handling and timeout for Copilot CLI

Author: emmanuelknafo

.github/workflows/security-agent-workflow.yml

@@ -31,15 +31,31 @@ jobs:
                   GITHUB_REPOSITORY: ${{ github.repository }}
               run: |
                   set -euo pipefail
+                  
+                  # Verify agent file exists
+                  if [ ! -f ".github/agents/security-agent.md" ]; then
+                    echo "Error: Security agent file not found"
+                    exit 1
+                  fi
+                  
                   AGENT_PROMPT=$(cat .github/agents/security-agent.md)
                   PROMPT="$AGENT_PROMPT"
                   PROMPT+=$'\n\nContext:\n'
                   PROMPT+="- Repository: $GITHUB_REPOSITORY"
                   PROMPT+=$'\n\nTask:\n'
-                  PROMPT+=$"\n- Execute the instructions on the full codebase"
-                  PROMPT+=$'\n- Generate the security report at /security-reports/security-assessment-report.md summarizing findings, severity, and remediation guidance.'
+                  PROMPT+="- Execute the instructions on the full codebase"
+                  PROMPT+="- Generate the security report at security-reports/security-assessment-report.md summarizing findings, severity, and remediation guidance."
+                  PROMPT+=$'\n\nIMPORTANT: Complete the analysis and save the report file. Do not wait for user input.'
 
-                  copilot --prompt "$PROMPT" --allow-all-tools --allow-all-paths < /dev/null
+                  # Run with timeout to prevent hanging
+                  timeout 600 copilot --prompt "$PROMPT" --allow-all-tools --allow-all-paths < /dev/null || {
+                    exit_code=$?
+                    if [ $exit_code -eq 124 ]; then
+                      echo "Warning: Copilot CLI timed out after 10 minutes"
+                    fi
+                    # Continue even if copilot exits non-zero, report may still be generated
+                    echo "Copilot CLI exited with code: $exit_code"
+                  }
 
             - name: Output security report as summary
               if: always()