From bdd8aa6d7c9792d5ce1ec506236b01ff0abd8b69 Mon Sep 17 00:00:00 2001 From: Enrique Chan Date: Mon, 18 May 2026 11:50:14 -0700 Subject: [PATCH 1/2] security: fix RCE vulnerability in test_templated_agent workflow --- .github/workflows/test_templated_agent.yaml | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/.github/workflows/test_templated_agent.yaml b/.github/workflows/test_templated_agent.yaml index 2adae47bf..a5c9106e4 100644 --- a/.github/workflows/test_templated_agent.yaml +++ b/.github/workflows/test_templated_agent.yaml @@ -1,7 +1,7 @@ name: checks on: - pull_request_target: + pull_request: jobs: # JOB 1: Discover which specific agent folders have changed. @@ -17,7 +17,6 @@ jobs: uses: actions/checkout@v5 with: fetch-depth: 0 - ref: ${{ github.event.pull_request.head.sha }} - name: Get changed files id: changed_files @@ -87,8 +86,6 @@ jobs: steps: - name: Checkout code uses: actions/checkout@v5 - with: - ref: ${{ github.event.pull_request.head.sha }} - id: 'auth' name: 'Authenticate to Google Cloud' From ac756ebcb32670d943f36d4c15b3ddb39784ae49 Mon Sep 17 00:00:00 2001 From: Enrique Chan Date: Mon, 18 May 2026 21:31:40 -0700 Subject: [PATCH 2/2] feat(economic-research): enable agent tracing by default during deployment --- .../economic_research/deployment/deploy.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/agents/economic-research-agent/economic_research/deployment/deploy.py b/python/agents/economic-research-agent/economic_research/deployment/deploy.py index d162d186f..37a745337 100644 --- a/python/agents/economic-research-agent/economic_research/deployment/deploy.py +++ b/python/agents/economic-research-agent/economic_research/deployment/deploy.py @@ -83,7 +83,7 @@ def deploy_era_to_vertex(project_id: str, location: str = "us-east1"): adk_app = AdkApp( agent=root_agent, - enable_tracing=False, + enable_tracing=True, ) # Use the new agent_engines API