Add configurable file type restrictions to cache-memory and repo-memory with validation failure reporting #15195

Copilot · 2026-02-12T15:45:36Z

Complete: Configurable File Type Restrictions with Failure Reporting ✅

Changes Implemented

1. Configurable File Extensions

Added allowed-extensions field to both cache-memory and repo-memory
Supports custom configuration via YAML array: allowed-extensions: [".txt", ".csv", ".json"]
Defaults to [".json", ".jsonl", ".txt", ".md", ".csv"] when not specified
JavaScript validation accepts custom extensions parameter
Dynamic prompts show configured extensions to AI agents

2. Code Refactoring

Created generateInlineGitHubScriptStep() helper for github-script code generation
Extracted cache_memory_prompt_multi.md template for multi-cache prompts
Moved default extensions to pkg/constants/constants.go as DefaultAllowedMemoryExtensions
Created parseCacheMemoryEntry() helper that parses single cache object and is reused for both array and object syntax
Eliminated ~150 lines of duplicate code

3. Validation Failure Reporting

Added step IDs to push_repo_memory steps for output capture
Added job outputs for validation failures: validation_failed_{memory_id} and validation_error_{memory_id}
Validation outputs passed to conclusion job via environment variables
Enhanced handle_agent_failure.cjs to collect and report validation errors
Updated failure templates to include {repo_memory_validation_context}
Validation errors now appear in agent failure issues and comments with detailed file information

4. Smoke Test Configuration

Added allowed-repos: ["github/gh-aw"] restriction to smoke-copilot workflow's add-comment configuration

Example Configuration

tools:
  cache-memory:
    allowed-extensions: [".txt", ".csv", ".json"]
    
  repo-memory:
    allowed-extensions: [".md", ".json", ".toml"]

Example Validation Error in Failure Report

⚠️ Repo-Memory Validation Failed: Invalid file types detected in repo-memory.

Validation Errors:
- Memory "notes": File type validation failed: Found 2 file(s) with invalid extensions. Only .json, .md are allowed. Invalid files: data.log, app.config

Code Quality Improvements

Single source of truth: Entry parsing logic in one function
Reduced duplication: ~150 lines total eliminated
Better maintainability: Changes apply to all syntax forms
Shared constants: Memory extensions defined once
Enhanced visibility: Validation failures reported in agent failure tracking

Testing

✅ 20 JavaScript tests passing (including custom extension scenarios)
✅ All Go unit tests passing
✅ 147 workflows recompiled successfully
✅ Code review clean
✅ CodeQL security scan - no vulnerabilities

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

Changeset

Type: patch
Description: Add configurable allowed extensions for cache-memory and repo-memory along with validation failure reporting

Generated by Changeset Generator

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-02-12T16:19:02Z

The list of allowed file extensions should be configurable through allowed-extensions: [".txt", ".csv", ".json"] @copilot

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-02-12T16:37:36Z

The list of allowed file extensions should be configurable through allowed-extensions: [".txt", ".csv", ".json"] @copilot

Implemented in commit 50c701e. The allowed-extensions field is now configurable for both cache-memory and repo-memory:

tools:
  cache-memory:
    allowed-extensions: [".txt", ".csv", ".json"]
    
  repo-memory:
    allowed-extensions: [".md", ".json", ".toml"]

When not specified, defaults to [".json", ".jsonl", ".txt", ".md", ".csv"]. The configured extensions are:

Shown in agent prompts dynamically
Validated before upload (cache-memory) and before push (repo-memory)
Passed to JavaScript validation via JSON array

…assing Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-02-12T16:45:10Z

pkg/workflow/cache.go

+
+		// Validate cache-memory file types step
+		var validateStep strings.Builder
+		fmt.Fprintf(&validateStep, "      - name: Validate cache-memory file types (%s)\n", cache.ID)


@copilot use helper to code generate actions/github-script code

pelikhan · 2026-02-12T16:45:53Z

pkg/workflow/cache.go

@copilot refactor this template template in a .md and render it

pelikhan · 2026-02-12T16:46:12Z

pkg/workflow/cache.go

+		} else {
+			fmt.Fprintf(builder, "      - name: Validate cache-memory file types (%s)\n", cache.ID)
+		}
+		builder.WriteString("        if: always()\n")


@copilot use helper to generate call to actions/github-script

github-actions · 2026-02-12T18:31:02Z

🔍 PR Triage Results

Category: feature (security) | Risk: medium | Priority: 57/100

Scores Breakdown

Impact: 32/50 - Important security feature for memory validation. Affects all workflows using cache-memory/repo-memory (74+ workflows). Good feature but not critical/blocking.
Urgency: 10/30 - Medium urgency - security improvement but not fixing active vulnerability. PR age: 2.7 hours. CI pending. No security/P0/P1 labels.
Quality: 15/20 - Good quality - Detailed PR description, comprehensive testing with 20 JS tests, CI pending, all unit tests passing mentioned, comprehensive documentation.

📋 Recommended Action: batch_review

Medium risk, medium priority (57/100), good quality. Not auto-mergeable due to pending CI and medium risk level. Should be reviewed but not urgent. Could be batched with other memory/security features if they exist.

Batch Info: Eligible for batch-memory-security-001 (monitor for similar PRs)

Triaged by PR Triage Agent on 2026-02-12T18:26:00Z (Run #21959060330)

AI generated by PR Triage Agent

pelikhan · 2026-02-12T18:36:46Z

@copilot keep working

…cache prompts Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-02-12T21:52:56Z

@copilot add allowed-repos: ["github/gh-aw"] on smoke-copilot add-comment

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-02-12T22:01:51Z

@copilot add allowed-repos: ["github/gh-aw"] on smoke-copilot add-comment

Added in commit 03ae75c. The smoke-copilot workflow now has allowed-repos: ["github/gh-aw"] configured for the add-comment safe output.

github-actions · 2026-02-12T22:06:48Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-02-12T22:06:49Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-02-12T22:06:49Z

✅ Changeset Generator completed successfully!

github-actions · 2026-02-12T22:06:51Z

🧪 Smoke Project is now testing project operations...

github-actions · 2026-02-12T22:06:51Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

Copilot

Pull request overview

Adds configurable allowed file-extension restrictions for cache-memory and repo-memory, validates memory directories against those allow-lists, and surfaces validation failures in agent failure reporting (issues/comments). This fits into the workflow compiler + setup action tooling that generates locked workflows and orchestrates agent runs safely.

Changes:

Introduces allowed-extensions configuration for cache-memory and repo-memory (schema/docs/constants) and updates prompts to mention allowed types.
Adds cache-memory validation steps in generated workflows and repo-memory validation during push, with failure outputs propagated into the conclusion failure handler.
Refactors cache-memory multi-cache prompt into a reusable template file and adds a helper for generating inline github-script steps.

Reviewed changes

Copilot reviewed 97 out of 97 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
pkg/workflow/repo_memory_prompt.go	Updates repo-memory prompt text to mention allowed file types and new examples.
pkg/workflow/prompts_test.go	Updates workflow prompt generation tests to expect the new multi-cache prompt template reference.
pkg/workflow/prompts/cache_memory_prompt_multi.md	Adds a template for multi-cache cache-memory prompt content with placeholders.
pkg/workflow/prompts/cache_memory_prompt.md	Adds allowed file type messaging and updates examples for single-cache prompt template.
pkg/workflow/notify_comment.go	Passes repo-memory validation outputs into the agent failure handler via env vars.
pkg/workflow/compiler_yaml_main_job.go	Inserts cache-memory validation step generation after agent execution.
pkg/workflow/compiler_yaml_helpers.go	Adds helper to generate inline `actions/github-script` steps.
pkg/workflow/cache_memory_prompt_test.go	Updates cache-memory prompt unit tests for template-file-based multi-cache prompts + env var substitution.
pkg/workflow/cache_memory_integration_test.go	Updates integration tests to match template reference behavior.
pkg/workflow/cache_memory_import_test.go	Updates import tests to match template reference behavior.
pkg/parser/schemas/main_workflow_schema.json	Adds `allowed-extensions` to cache-memory and repo-memory schema definitions.
pkg/constants/constants.go	Defines default allowed extensions list for memory tools.
docs/src/content/docs/reference/frontmatter-full.md	Documents the new `allowed-extensions` fields for cache-memory and repo-memory.
actions/setup/md/agent_failure_issue.md	Adds repo-memory validation context placeholder to failure issue template.
actions/setup/md/agent_failure_comment.md	Adds repo-memory validation context placeholder to failure comment template.
actions/setup/js/validate_memory_files.cjs	Adds reusable JS helper to validate memory directories contain only allowed file types.
actions/setup/js/push_repo_memory.cjs	Validates repo-memory artifact contents against allowed extensions; sets step outputs on failure.
actions/setup/js/handle_agent_failure.cjs	Collects repo-memory validation outputs from env vars and renders them in failure reports.
.github/workflows/workflow-health-manager.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring.
.github/workflows/weekly-issue-summary.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/unbloat-docs.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/test-create-pr-error-handling.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/technical-doc-writer.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/super-linter.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/step-name-alignment.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/static-analysis-report.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/stale-repo-identifier.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/smoke-copilot.md	Adds `allowed-repos: ["github/gh-aw"]` restriction to add-comment safe output config.
.github/workflows/smoke-copilot.lock.yml	Regenerates locked workflow with updated safe-output config + cache-memory prompt substitutions + validation steps.
.github/workflows/smoke-codex.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/smoke-claude.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/slide-deck-maintainer.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/sergo.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/security-review.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/security-compliance.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring.
.github/workflows/scout.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/schema-consistency-checker.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/safe-output-health.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/repository-quality-improver.lock.yml	Regenerates locked workflow to use multi-cache prompt template + substitutions + validation steps.
.github/workflows/repo-audit-analyzer.lock.yml	Regenerates locked workflow to use multi-cache prompt template + substitutions + validation steps.
.github/workflows/q.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/python-data-charts.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/prompt-clustering-analysis.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/pr-triage-agent.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring.
.github/workflows/pr-nitpick-reviewer.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/portfolio-analyst.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/poem-bot.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/pdf-summary.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/org-health-report.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/metrics-collector.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring.
.github/workflows/mcp-inspector.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/lockfile-stats.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/jsweep.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/instructions-janitor.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/grumpy-reviewer.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/gpclean.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/go-logger.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/go-fan.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/glossary-maintainer.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/github-mcp-tools-report.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/github-mcp-structural-analysis.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/firewall-escape.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring + cache-memory validation steps.
.github/workflows/discussion-task-miner.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring.
.github/workflows/developer-docs-consolidator.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/delight.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring.
.github/workflows/deep-report.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring + cache-memory validation steps.
.github/workflows/daily-testify-uber-super-expert.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring.
.github/workflows/daily-safe-output-optimizer.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/daily-repo-chronicle.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/daily-performance-summary.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/daily-news.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring + cache-memory validation steps.
.github/workflows/daily-mcp-concurrency-analysis.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/daily-issues-report.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/daily-firewall-report.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/daily-doc-updater.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/daily-compiler-quality.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/daily-code-metrics.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring + cache-memory validation steps.
.github/workflows/daily-cli-performance.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring.
.github/workflows/copilot-cli-deep-research.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring.
.github/workflows/code-scanning-fixer.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring + cache-memory validation steps.
.github/workflows/cloclo.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/cli-version-checker.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/claude-code-user-docs-review.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/ci-doctor.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/ci-coach.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/chroma-issue-indexer.lock.yml	Regenerates locked workflow to use multi-cache prompt template + substitutions + validation steps.
.github/workflows/agent-persona-explorer.lock.yml	Regenerates locked workflow with cache-memory allowed extensions prompt substitution and validation steps.
.github/workflows/agent-performance-analyzer.lock.yml	Regenerates locked workflow with updated repo-memory prompt + validation outputs wiring.

Comments suppressed due to low confidence (1)

pkg/workflow/repo_memory_prompt.go:101

The multi-memory prompt uses config.Memories[0].AllowedExtensions to describe allowed file types. Because allowed-extensions is configured per memory entry, this can be inaccurate when different memories have different allow-lists. Consider rendering allowed extensions per memory, or enforce/validate that all entries share the same extensions before using the first.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-02-12T22:10:16Z

actions/setup/js/validate_memory_files.cjs

+  const extensions = allowedExtensions && allowedExtensions.length > 0 ? allowedExtensions : [".json", ".jsonl", ".txt", ".md", ".csv"];
+  const invalidFiles = [];
+
+  // Check if directory exists
+  if (!fs.existsSync(memoryDir)) {
+    core.info(`Memory directory does not exist: ${memoryDir}`);
+    return { valid: true, invalidFiles: [] };
+  }
+
+  /**
+   * Recursively scan directory for files
+   * @param {string} dirPath - Directory to scan
+   * @param {string} relativePath - Relative path from memory directory
+   */
+  function scanDirectory(dirPath, relativePath = "") {
+    const entries = fs.readdirSync(dirPath, { withFileTypes: true });
+
+    for (const entry of entries) {
+      const fullPath = path.join(dirPath, entry.name);
+      const relativeFilePath = relativePath ? path.join(relativePath, entry.name) : entry.name;
+
+      if (entry.isDirectory()) {
+        // Recursively scan subdirectory
+        scanDirectory(fullPath, relativeFilePath);
+      } else if (entry.isFile()) {
+        // Check file extension
+        const ext = path.extname(entry.name).toLowerCase();
+        if (!extensions.includes(ext)) {
+          invalidFiles.push(relativeFilePath);


validateMemoryFiles lowercases the scanned file extension but does not normalize allowedExtensions. If a workflow config supplies extensions with uppercase characters (e.g., ".MD"), validation will incorrectly reject files. Normalize allowedExtensions to lowercase (and ideally trim whitespace) before using includes.

Copilot · 2026-02-12T22:10:17Z

actions/setup/js/push_repo_memory.cjs

  const maxFileSize = parseInt(process.env.MAX_FILE_SIZE || "10240", 10);
  const maxFileCount = parseInt(process.env.MAX_FILE_COUNT || "100", 10);
  const fileGlobFilter = process.env.FILE_GLOB_FILTER || "";
+  const allowedExtensions = process.env.ALLOWED_EXTENSIONS ? JSON.parse(process.env.ALLOWED_EXTENSIONS) : [".json", ".jsonl", ".txt", ".md", ".csv"];


ALLOWED_EXTENSIONS is parsed with JSON.parse without error handling. If the env var is malformed, this will throw and fail the step with an unhelpful stack trace (and without setting validation outputs). Wrap parsing in a try/catch and core.setFailed with a clear message (and/or fall back to defaults).

Copilot · 2026-02-12T22:10:17Z

pkg/workflow/cache.go

+		fmt.Fprintf(&validationScript, "            const allowedExtensions = %s;\n", allowedExtsJSON)
+		fmt.Fprintf(&validationScript, "            const result = validateMemoryFiles('%s', 'cache', allowedExtensions);\n", cacheDir)
+		validationScript.WriteString("            if (!result.valid) {\n")
+		fmt.Fprintf(&validationScript, "              core.setFailed(`File type validation failed: Found $${result.invalidFiles.length} file(s) with invalid extensions. Only %s are allowed.`);\n", strings.Join(cache.AllowedExtensions, ", "))


The generated JS template literal uses $${result.invalidFiles.length}, which will include an extra $ in the rendered error message (e.g., "Found $3 file(s)"). Use ${result.invalidFiles.length} instead so the count renders correctly.

Copilot · 2026-02-12T22:10:17Z

pkg/workflow/cache.go

+	// Build allowed extensions text (use the first cache's extensions as they should all be the same for the group)
+	allowedExtsText := strings.Join(config.Caches[0].AllowedExtensions, ", ")


For multi-cache prompts, the allowed extensions text is taken only from config.Caches[0] with a comment that all caches "should" be the same. Since allowed-extensions is configured per cache entry, this can produce incorrect guidance when caches have different allow-lists. Either validate at compile time that all caches share the same AllowedExtensions, or render per-cache allowed extensions (or a union) in the prompt.

Copilot · 2026-02-12T22:10:17Z

pkg/workflow/repo_memory_prompt.go

 		yaml.WriteString("          - **Automatic Push**: Changes are automatically committed and pushed after the workflow completes\n")
 		yaml.WriteString("          - **Merge Strategy**: In case of conflicts, your changes (current version) win\n")
 		yaml.WriteString("          - **Persistence**: Files persist across workflow runs via git branch storage\n")
+		yaml.WriteString("          - **Allowed File Types**: Only the following file extensions are allowed: `.json`, `.jsonl`, `.txt`, `.md`, `.csv`. Files with other extensions will be rejected during validation.\n")


The prompt hardcodes the allowed file extensions list. Since allowed-extensions is configurable per repo-memory entry, this line can become incorrect and mislead agents when the workflow customizes extensions. Build this text from memory.AllowedExtensions (or the shared default) instead of a hard-coded list.

This issue also appears on line 99 of the same file.

github-actions · 2026-02-12T22:10:21Z

✅ Smoke Project completed successfully. All project operations validated.

github-actions · 2026-02-12T22:11:49Z

PRs: Extract duplicate logic to safe output helper functions; Fix ReDoS in secret scanning regex patterns
GitHub MCP: ✅
Serena MCP: ✅
Playwright: ✅
File write: ✅
Bash cat: ✅
Build: ✅
Overall: PASS

AI generated by Smoke Codex

github-actions · 2026-02-12T22:11:51Z

🤖 beep boop The smoke test agent was here! 🎭

Just passing through on my daily rounds, testing all the things. Everything's looking ship-shape! May your workflows always compile and your tests always pass. ✨

(Smoke Test Run §21966079876)

AI generated by Smoke Copilot

github-actions · 2026-02-12T22:11:57Z

Smoke Test Results

PR #15240 - Add allowed-repos support to add-labels and close-issue safe outputs
PR #15208 - 🔒 Implement markdown security scanner for workflows

✅ GitHub MCP
✅ Safe Inputs GH CLI
✅ Playwright
✅ File Writing/Bash
✅ Discussion Comment
✅ Build gh-aw
✅ Workflow Dispatch

Status: PASS ✅

cc @pelikhan @Copilot

AI generated by Smoke Copilot

github-actions · 2026-02-12T22:12:28Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-02-12T22:14:30Z

Agent Container Tool Check ✅

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.52.0
jq	✅	1.7
yq	✅	4.52.2
curl	✅	8.5.0
gh	✅	2.86.0
node	✅	20.20.0
python3	✅	3.12.3
go	✅	1.24.13
java	✅	21.0.10
dotnet	✅	10.0.102

Result: 12/12 tools available ✅

All common development tools are accessible in the agent container environment.

AI generated by Agent Container Smoke Test

Initial plan

e5be768

Copilot AI assigned Copilot and pelikhan Feb 12, 2026

Copilot started work on behalf of pelikhan February 12, 2026 15:45 View session

Copilot stopped work on behalf of pelikhan due to an error February 12, 2026 15:46
Failed to launch agent

Add cache-memory and repo-memory file type validation

4ec51e7

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Update cache memory to support specific file types~~ Restrict cache-memory and repo-memory to allowed file types Feb 12, 2026

Copilot AI requested a review from pelikhan February 12, 2026 16:00

Copilot finished work on behalf of pelikhan February 12, 2026 16:00

Copilot started work on behalf of pelikhan February 12, 2026 16:19 View session

Plan: Make file type restrictions configurable via allowed-extensions

0407bbc

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

github-actions bot mentioned this pull request Feb 12, 2026

📰 Repository Chronicle - AI-Powered Productivity Surge Reshapes Development Landscape #15197

Open

Make file type restrictions configurable via allowed-extensions

50c701e

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan and others added 2 commits February 12, 2026 08:44

Merge branch 'main' into copilot/update-cache-file-type-support

d8bbf51

Complete configurable allowed-extensions implementation - all tests p…

50cf3bf

…assing Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan reviewed Feb 12, 2026

View reviewed changes

Copilot AI changed the title ~~Restrict cache-memory and repo-memory to allowed file types~~ Add configurable file type restrictions to cache-memory and repo-memory Feb 12, 2026

Copilot AI requested a review from pelikhan February 12, 2026 16:46

Copilot finished work on behalf of pelikhan February 12, 2026 16:46

Copilot started work on behalf of pelikhan February 12, 2026 16:47 View session

github-actions bot mentioned this pull request Feb 12, 2026

[PR Triage Report] PR Triage Report - 2026-02-12 #15220

Open

github-actions bot added enhancement New feature or request security labels Feb 12, 2026

Copilot started work on behalf of pelikhan February 12, 2026 18:37 View session

Refactor: Use helpers for github-script steps and template for multi-…

09feb48

…cache prompts Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot started work on behalf of pelikhan February 12, 2026 21:52 View session

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

5c09b96

Copilot finished work on behalf of pelikhan February 12, 2026 21:57

Copilot AI requested a review from pelikhan February 12, 2026 21:57

Copilot started work on behalf of pelikhan February 12, 2026 21:57 View session

Add allowed-repos restriction to smoke-copilot add-comment

03ae75c

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan February 12, 2026 22:02

pelikhan marked this pull request as ready for review February 12, 2026 22:06

Copilot AI review requested due to automatic review settings February 12, 2026 22:06

pelikhan added the smoke label Feb 12, 2026

Copilot started reviewing on behalf of pelikhan February 12, 2026 22:07 View session

Copilot AI reviewed Feb 12, 2026

View reviewed changes

Add changeset [skip-ci]

708b061

github-actions bot added the smoke-codex label Feb 12, 2026

github-actions bot removed the smoke label Feb 12, 2026

github-actions bot mentioned this pull request Feb 12, 2026

Smoke Test: Copilot - 21966079876 #15244

Open

github-actions bot added the smoke-copilot label Feb 12, 2026

		// Build allowed extensions text (use the first cache's extensions as they should all be the same for the group)
		allowedExtsText := strings.Join(config.Caches[0].AllowedExtensions, ", ")

Add configurable file type restrictions to cache-memory and repo-memory with validation failure reporting #15195

Are you sure you want to change the base?

Add configurable file type restrictions to cache-memory and repo-memory with validation failure reporting #15195

Conversation

Copilot AI commented Feb 12, 2026 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Complete: Configurable File Type Restrictions with Failure Reporting ✅

Changes Implemented

Example Configuration

Example Validation Error in Failure Report

Code Quality Improvements

Testing

Changeset

Uh oh!

pelikhan commented Feb 12, 2026

Uh oh!

Copilot AI commented Feb 12, 2026

Uh oh!

pelikhan Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

pelikhan Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

pelikhan Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Feb 12, 2026

🔍 PR Triage Results

Scores Breakdown

📋 Recommended Action: batch_review

Uh oh!

pelikhan commented Feb 12, 2026

Uh oh!

pelikhan commented Feb 12, 2026

Uh oh!

Copilot AI commented Feb 12, 2026

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026

Uh oh!

github-actions bot commented Feb 12, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 12, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Feb 12, 2026

Uh oh!

github-actions bot commented Feb 12, 2026

Uh oh!

github-actions bot commented Feb 12, 2026

Uh oh!

github-actions bot commented Feb 12, 2026

Smoke Test Results

Uh oh!

Copilot AI commented Feb 12, 2026 •

edited by github-actions bot

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading