Skip to content

Commit cfca8ad

Browse files
Upgrade gh-aw to v0.79.6 and recompile workflows (#1460)
Bumps the [gh-aw](https://github.com/github/gh-aw) compiler from **v0.68.3** to **v0.79.6** and regenerates the lock files via `gh aw upgrade`. Source `.md` files are unchanged apart from minor frontmatter cleanup. ## Notable supply-chain improvements in the regenerated output - **Container images now pinned by digest** in addition to tag (firewall `agent`, `api-proxy`, `squid`, `mcpg`, `github-mcp-server`). - **Action SHAs refreshed**: - `actions/checkout` v6.0.2 → v6.0.3 - `actions/github-script` v9 → v9.0.0 - `github/gh-aw-actions/setup` v0.68.3 → v0.79.6 - (new) `actions/setup-node` v6.4.0 pin - **Lock-file schema bumped** v3 → v4 (adds `body_hash` to metadata). - **`linguist-generated=true merge=ours`** marker added in `.gitattributes` for `*.lock.yml` so GitHub diff views collapse them and merges prefer the regenerated copy. ## Files changed - `.gitattributes` — linguist-generated marker for lock files - `.github/agents/agentic-workflows.md` — new dispatcher agent file installed by `gh aw upgrade` - `.github/skills/agentic-workflows/SKILL.md` — companion skill reference - `.github/aw/actions-lock.json` — refreshed action pin entries - `.github/workflows/java-interop-reviewer.md` — frontmatter cleanup (job `environment:` for protection rules) - `.github/workflows/java-interop-reviewer.lock.yml` — regenerated lock for the existing reviewer workflow ## Verification ``` > gh aw version gh aw version v0.79.6 > gh aw upgrade ℹ Updating dispatcher skill... ℹ Applying codemods to all workflows... ℹ ✓ No fixes needed ℹ Updating GitHub Actions versions... ℹ Compiling all workflows... ✓ .github\workflows\java-interop-reviewer.md (104.3 KB) ✓ Upgrade complete ``` Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent 0104236 commit cfca8ad

6 files changed

Lines changed: 798 additions & 140 deletions

File tree

.gitattributes

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -41,3 +41,5 @@ gradlew eol=lf
4141
*.properties eol=lf
4242
*.kt eol=lf
4343
*.kts eol=lf
44+
45+
.github/workflows/*.lock.yml linguist-generated=true merge=ours
Lines changed: 224 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,224 @@
1+
---
2+
name: Agentic Workflows
3+
description: GitHub Agentic Workflows (gh-aw) - Create, debug, and upgrade AI-powered workflows with intelligent prompt routing.
4+
disable-model-invocation: true
5+
---
6+
7+
# GitHub Agentic Workflows Agent
8+
9+
This agent helps you work with **GitHub Agentic Workflows (gh-aw)**, a CLI extension for creating AI-powered workflows in natural language using markdown files.
10+
11+
## What This Agent Does
12+
13+
This is a **dispatcher agent** that routes your request to the appropriate specialized prompt based on your task:
14+
15+
- **Creating new workflows**: Routes to `create` prompt
16+
- **Updating existing workflows**: Routes to `update` prompt
17+
- **Debugging workflows**: Routes to `debug` prompt
18+
- **Upgrading workflows**: Routes to `upgrade-agentic-workflows` prompt
19+
- **Creating report-generating workflows**: Routes to `report` prompt — consult this whenever the workflow posts status updates, audits, analyses, or any structured output as issues, discussions, or comments
20+
- **Creating shared components**: Routes to `create-shared-agentic-workflow` prompt
21+
- **Fixing Dependabot PRs**: Routes to `dependabot` prompt — use this when Dependabot opens PRs that modify generated manifest files (`.github/workflows/package.json`, `.github/workflows/requirements.txt`, `.github/workflows/go.mod`). Never merge those PRs directly; instead update the source `.md` files and rerun `gh aw compile --dependabot` to bundle all fixes
22+
- **Analyzing test coverage**: Routes to `test-coverage` prompt — consult this whenever the workflow reads, analyzes, or reports on test coverage data from PRs or CI runs
23+
- **Rendering ASCII charts in markdown**: Routes to `asciicharts` guide — consult this whenever the workflow needs compact charts that render reliably in GitHub issues, comments, or discussions
24+
- **CLI commands and triggering workflows**: Routes to `cli-commands` guide — consult this whenever the user asks how to run, compile, debug, or manage workflows from the command line, or when they need the MCP tool equivalent of a `gh aw` command
25+
- **Reducing token consumption / cost optimization**: Routes to `token-optimization` guide — consult this whenever the user asks how to reduce token usage, lower costs, speed up workflows, or measure the impact of prompt changes with experiments
26+
- **Choosing workflow architectures and design patterns**: Routes to `patterns` guide — consult this whenever the user asks for strategy, architecture, operating models, or pattern selection for agentic workflows
27+
28+
Workflows may optionally include:
29+
30+
- **Project tracking / monitoring** (GitHub Projects updates, status reporting)
31+
- **Orchestration / coordination** (one workflow assigning agents or dispatching and coordinating other workflows)
32+
33+
## Files This Applies To
34+
35+
- Workflow files: `.github/workflows/*.md` and `.github/workflows/**/*.md`
36+
- Workflow lock files: `.github/workflows/*.lock.yml`
37+
- Shared components: `.github/workflows/shared/*.md`
38+
- Configuration: `.github/aw/github-agentic-workflows.md`
39+
40+
## Problems This Solves
41+
42+
- **Workflow Creation**: Design secure, validated agentic workflows with proper triggers, tools, and permissions
43+
- **Workflow Debugging**: Analyze logs, identify missing tools, investigate failures, and fix configuration issues
44+
- **Version Upgrades**: Migrate workflows to new gh-aw versions, apply codemods, fix breaking changes
45+
- **Component Design**: Create reusable shared workflow components that wrap MCP servers
46+
47+
## How to Use
48+
49+
When you interact with this agent, it will:
50+
51+
1. **Understand your intent** - Determine what kind of task you're trying to accomplish
52+
2. **Route to the right prompt** - Load the specialized prompt file for your task
53+
3. **Execute the task** - Follow the detailed instructions in the loaded prompt
54+
55+
## Available Prompts
56+
57+
### Create New Workflow
58+
**Load when**: User wants to create a new workflow from scratch, add automation, or design a workflow that doesn't exist yet
59+
60+
**Prompt file**: `.github/aw/create-agentic-workflow.md`
61+
62+
**Use cases**:
63+
- "Create a workflow that triages issues"
64+
- "I need a workflow to label pull requests"
65+
- "Design a weekly research automation"
66+
67+
### Update Existing Workflow
68+
**Load when**: User wants to modify, improve, or refactor an existing workflow
69+
70+
**Prompt file**: `.github/aw/update-agentic-workflow.md`
71+
72+
**Use cases**:
73+
- "Add web-fetch tool to the issue-classifier workflow"
74+
- "Update the PR reviewer to use discussions instead of issues"
75+
- "Improve the prompt for the weekly-research workflow"
76+
77+
### Debug Workflow
78+
**Load when**: User needs to investigate, audit, debug, or understand a workflow, troubleshoot issues, analyze logs, or fix errors
79+
80+
**Prompt file**: `.github/aw/debug-agentic-workflow.md`
81+
82+
**Use cases**:
83+
- "Why is this workflow failing?"
84+
- "Analyze the logs for workflow X"
85+
- "Investigate missing tool calls in run #12345"
86+
87+
### Upgrade Agentic Workflows
88+
**Load when**: User wants to upgrade workflows to a new gh-aw version or fix deprecations
89+
90+
**Prompt file**: `.github/aw/upgrade-agentic-workflows.md`
91+
92+
**Use cases**:
93+
- "Upgrade all workflows to the latest version"
94+
- "Fix deprecated fields in workflows"
95+
- "Apply breaking changes from the new release"
96+
97+
### Create a Report-Generating Workflow
98+
**Load when**: The workflow being created or updated produces reports — recurring status updates, audit summaries, analyses, or any structured output posted as a GitHub issue, discussion, or comment
99+
100+
**Prompt file**: `.github/aw/report.md`
101+
102+
**Use cases**:
103+
- "Create a weekly CI health report"
104+
- "Post a daily security audit to Discussions"
105+
- "Add a status update comment to open PRs"
106+
107+
### Create Shared Agentic Workflow
108+
**Load when**: User wants to create a reusable workflow component or wrap an MCP server
109+
110+
**Prompt file**: `.github/aw/create-shared-agentic-workflow.md`
111+
112+
**Use cases**:
113+
- "Create a shared component for Notion integration"
114+
- "Wrap the Slack MCP server as a reusable component"
115+
- "Design a shared workflow for database queries"
116+
117+
### Fix Dependabot PRs
118+
**Load when**: User needs to close or fix open Dependabot PRs that update dependencies in generated manifest files (`.github/workflows/package.json`, `.github/workflows/requirements.txt`, `.github/workflows/go.mod`)
119+
120+
**Prompt file**: `.github/aw/dependabot.md`
121+
122+
**Use cases**:
123+
- "Fix the open Dependabot PRs for npm dependencies"
124+
- "Bundle and close the Dependabot PRs for workflow dependencies"
125+
- "Update @playwright/test to fix the Dependabot PR"
126+
127+
### Analyze Test Coverage
128+
**Load when**: The workflow reads, analyzes, or reports test coverage — whether triggered by a PR, a schedule, or a slash command. Always consult this prompt before designing the coverage data strategy.
129+
130+
**Prompt file**: `.github/aw/test-coverage.md`
131+
132+
**Use cases**:
133+
- "Create a workflow that comments coverage on PRs"
134+
- "Analyze coverage trends over time"
135+
- "Add a coverage gate that blocks PRs below a threshold"
136+
137+
### CLI Commands Reference
138+
**Load when**: The user asks how to run, compile, debug, or manage workflows from the command line; needs the MCP tool equivalent of a `gh aw` command; or is in a restricted environment (e.g., Copilot Cloud) without direct CLI access.
139+
140+
**Reference file**: `.github/aw/cli-commands.md`
141+
142+
**Use cases**:
143+
- "How do I trigger workflow X on the main branch?"
144+
- "What's the MCP equivalent of `gh aw logs`?"
145+
- "I'm in Copilot Cloud — how do I compile a workflow?"
146+
- "Show me all available gh aw commands"
147+
148+
### Token Consumption Optimization
149+
**Load when**: The user asks how to reduce token usage, lower workflow costs, make a workflow faster or cheaper, or measure the impact of prompt or configuration changes.
150+
151+
**Reference file**: `.github/aw/token-optimization.md`
152+
153+
**Use cases**:
154+
- "How do I reduce the token cost of this workflow?"
155+
- "My workflow is too expensive — how do I optimize it?"
156+
- "How do I compare token usage between two runs?"
157+
- "Should I use gh-proxy or the MCP server?"
158+
- "How do I use sub-agents to reduce costs?"
159+
- "How do I measure the impact of a prompt change?"
160+
161+
### Workflow Pattern Selection
162+
**Load when**: The user asks for architecture, strategy, operating model selection, or pattern recommendations for building agentic workflows.
163+
164+
**Reference file**: `.github/aw/patterns.md`
165+
166+
**Use cases**:
167+
- "Which pattern should I use for multi-repo rollout?"
168+
- "How should I structure this workflow architecture?"
169+
- "What pattern fits slash-command triage?"
170+
- "Should this be DispatchOps or DailyOps?"
171+
172+
## Instructions
173+
174+
When a user interacts with you:
175+
176+
1. **Identify the task type** from the user's request
177+
2. **Load the appropriate prompt** from the repository paths listed above
178+
3. **Follow the loaded prompt's instructions** exactly
179+
4. **If uncertain**, ask clarifying questions to determine the right prompt
180+
181+
## Quick Reference
182+
183+
```bash
184+
# Initialize repository for agentic workflows
185+
gh aw init
186+
187+
# Generate the lock file for a workflow
188+
gh aw compile [workflow-name]
189+
190+
# Trigger a workflow on demand (preferred over gh workflow run)
191+
gh aw run <workflow-name> # interactive input collection
192+
gh aw run <workflow-name> --ref main # run on a specific branch
193+
194+
# Debug workflow runs
195+
gh aw logs [workflow-name]
196+
gh aw audit <run-id>
197+
198+
# Upgrade workflows
199+
gh aw fix --write
200+
gh aw compile --validate
201+
```
202+
203+
## Key Features of gh-aw
204+
205+
- **Natural Language Workflows**: Write workflows in markdown with YAML frontmatter
206+
- **AI Engine Support**: Copilot, Claude, Codex, or custom engines
207+
- **MCP Server Integration**: Connect to Model Context Protocol servers for tools
208+
- **Safe Outputs**: Structured communication between AI and GitHub API
209+
- **Strict Mode**: Security-first validation and sandboxing
210+
- **Shared Components**: Reusable workflow building blocks
211+
- **Repo Memory**: Persistent git-backed storage for agents
212+
- **Sandboxed Execution**: All workflows run in the Agent Workflow Firewall (AWF) sandbox, enabling full `bash` and `edit` tools by default
213+
214+
## Important Notes
215+
216+
- Always reference the instructions file at `.github/aw/github-agentic-workflows.md` for complete documentation
217+
- Use the MCP tool `agentic-workflows` when running in GitHub Copilot Cloud
218+
- Workflows must be compiled to `.lock.yml` files before running in GitHub Actions
219+
- **Bash tools are enabled by default** - Don't restrict bash commands unnecessarily since workflows are sandboxed by the AWF
220+
- Follow security best practices: minimal permissions, explicit network access, no template injection
221+
- **Network configuration**: Use ecosystem identifiers (`node`, `python`, `go`, etc.) or explicit FQDNs in `network.allowed`. Bare shorthands like `npm` or `pypi` are **not** valid. See `.github/aw/network.md` for the full list of valid ecosystem identifiers and domain patterns.
222+
- **Single-file output**: When creating a workflow, produce exactly **one** workflow `.md` file. Do not create separate documentation files (architecture docs, runbooks, usage guides, etc.). If documentation is needed, add a brief `## Usage` section inside the workflow file itself.
223+
- **Triggering runs**: Always use `gh aw run <workflow-name>` to trigger a workflow on demand — not `gh workflow run <file>.lock.yml`. `gh aw run` handles workflow resolution by short name, input parsing and validation, and correct run-tracking for agentic workflows. Use `--ref <branch>` to run on a specific branch.
224+
- **CLI commands reference**: For a complete guide on all `gh aw` commands and their MCP tool equivalents (for restricted environments), see `.github/aw/cli-commands.md`

.github/aw/actions-lock.json

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
{
2+
"entries": {
3+
"actions/github-script@v9.0.0": {
4+
"repo": "actions/github-script",
5+
"version": "v9.0.0",
6+
"sha": "3a2844b7e9c422d3c10d287c895573f7108da1b3"
7+
},
8+
"github/gh-aw-actions/setup@v0.79.6": {
9+
"repo": "github/gh-aw-actions/setup",
10+
"version": "v0.79.6",
11+
"sha": "5c2fe865bb4dc46e1450f6ee0d0541d759aea73a"
12+
}
13+
}
14+
}
Lines changed: 79 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,79 @@
1+
---
2+
name: agentic-workflows
3+
description: Route gh-aw workflow design/create/debug/upgrade requests to the right prompts.
4+
---
5+
6+
# Agentic Workflows Router
7+
8+
Use this skill when a user asks to design, create, update, debug, or upgrade GitHub Agentic Workflows in this repository.
9+
10+
This skill is a dispatcher: identify the task type, load the matching workflow prompt/skill file, and follow it directly. Keep responses concise and ask a clarifying question if the correct prompt is unclear.
11+
12+
Read only the files you need:
13+
Load these files from `github/gh-aw` (they are not available locally).
14+
- `.github/aw/agentic-chat.md`
15+
- `.github/aw/agentic-workflows-mcp.md`
16+
- `.github/aw/asciicharts.md`
17+
- `.github/aw/campaign.md`
18+
- `.github/aw/charts-trending.md`
19+
- `.github/aw/charts.md`
20+
- `.github/aw/cli-commands.md`
21+
- `.github/aw/context.md`
22+
- `.github/aw/create-agentic-workflow.md`
23+
- `.github/aw/create-shared-agentic-workflow.md`
24+
- `.github/aw/debug-agentic-workflow.md`
25+
- `.github/aw/dependabot.md`
26+
- `.github/aw/deployment-status.md`
27+
- `.github/aw/experiments.md`
28+
- `.github/aw/github-agentic-workflows.md`
29+
- `.github/aw/github-mcp-server.md`
30+
- `.github/aw/llms.md`
31+
- `.github/aw/mcp-clis.md`
32+
- `.github/aw/memory.md`
33+
- `.github/aw/messages.md`
34+
- `.github/aw/network.md`
35+
- `.github/aw/patterns.md`
36+
- `.github/aw/pr-reviewer.md`
37+
- `.github/aw/report.md`
38+
- `.github/aw/reuse.md`
39+
- `.github/aw/safe-outputs-automation.md`
40+
- `.github/aw/safe-outputs-content.md`
41+
- `.github/aw/safe-outputs-management.md`
42+
- `.github/aw/safe-outputs-runtime.md`
43+
- `.github/aw/safe-outputs.md`
44+
- `.github/aw/serena-tool.md`
45+
- `.github/aw/shared-safe-jobs.md`
46+
- `.github/aw/skills.md`
47+
- `.github/aw/subagents.md`
48+
- `.github/aw/syntax-agentic.md`
49+
- `.github/aw/syntax-core.md`
50+
- `.github/aw/syntax-tools-imports.md`
51+
- `.github/aw/syntax.md`
52+
- `.github/aw/test-coverage.md`
53+
- `.github/aw/test-expression.md`
54+
- `.github/aw/token-optimization.md`
55+
- `.github/aw/triggers.md`
56+
- `.github/aw/update-agentic-workflow.md`
57+
- `.github/aw/upgrade-agentic-workflows.md`
58+
- `.github/aw/visual-regression.md`
59+
- `.github/aw/workflow-constraints.md`
60+
- `.github/aw/workflow-editing.md`
61+
- `.github/aw/workflow-patterns.md`
62+
63+
- `.github/skills/agentic-workflow-designer/SKILL.md`
64+
After loading the matching workflow prompt or skill, follow it directly:
65+
- Design workflows from scratch via interview: `skills/agentic-workflow-designer/SKILL.md`
66+
- Create new workflows: `.github/aw/create-agentic-workflow.md`
67+
- Update existing workflows: `.github/aw/update-agentic-workflow.md`
68+
- Debug, audit, or investigate workflows: `.github/aw/debug-agentic-workflow.md`
69+
- Upgrade workflows and fix deprecations: `.github/aw/upgrade-agentic-workflows.md`
70+
- Create shared components or MCP wrappers: `.github/aw/create-shared-agentic-workflow.md`
71+
- Create report-generating workflows: `.github/aw/report.md`
72+
- Fix Dependabot manifest PRs: `.github/aw/dependabot.md`
73+
- Analyze coverage workflows: `.github/aw/test-coverage.md`
74+
- Render compact markdown charts: `.github/aw/asciicharts.md`
75+
- Map CLI commands to MCP usage: `.github/aw/cli-commands.md`
76+
- Choose workflow architecture and patterns: `.github/aw/patterns.md`
77+
- Optimize token usage and cost: `.github/aw/token-optimization.md`
78+
79+
When the task involves OTEL, OTLP, traces, observability backends, or telemetry-driven analysis, also read and follow `skills/otel-queries/SKILL.md` after loading the matching workflow prompt or skill.

0 commit comments

Comments
 (0)