Fix AWF command quoting to ensure agent runs inside firewall container #11969

Copilot · 2026-01-26T23:38:38Z

Firewall-enabled workflows report 0 requests because the Copilot agent runs outside the AWF container. The compound command after -- was not quoted, so shell interprets && as an operator on the host.

Before (broken):

sudo -E awf ... \
  -- export PATH="..." && /usr/local/bin/copilot ... \
  2>&1 | tee ...

Shell sees: awf ... -- export PATH="..." then && copilot ... runs on host after AWF exits.

After (fixed):

sudo -E awf ... \
  -- 'export PATH="..." && /usr/local/bin/copilot ...' \
  2>&1 | tee ...

Entire command passed to AWF as single quoted argument.

Changes

pkg/workflow/copilot_engine_execution.go: Use shellEscapeArg() to quote the compound command for AWF mode and SRT custom command mode
91 workflow lock files: Recompiled with fix

Original prompt

Can you figure out why the firewall access.log reports 0 reuqets from this workflow run?

https://github.com/githubnext/gh-aw/actions/runs/21377937803

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Changeset

Type: patch
Description: Quote the compound Copilot command when passing it to AWF/SRT so it stays inside the firewall container.

Ahoy! This treasure was crafted by 🏴‍☠️ Changeset Generator

Changeset

Type: patch
Description: Quote the compound Copilot command when passing it to AWF/SRT so it stays inside the firewall container.

Ahoy! This treasure was crafted by 🏴‍☠️ Changeset Generator

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

The compound command after -- was not properly quoted, causing the && operator to be interpreted by the outer shell. This resulted in: 1. AWF container running only the PATH export (which exits immediately) 2. Copilot agent running on the host AFTER the firewall container stopped 3. Firewall reporting 0 requests Now the entire command is wrapped in single quotes so it's passed to AWF as a single argument, ensuring Copilot runs inside the firewall container. Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

github-actions · 2026-01-27T00:29:07Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-01-27T00:29:09Z

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

github-actions · 2026-01-27T00:29:10Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-01-27T00:29:14Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-01-27T00:33:26Z

🤖 Smoke Test Agent Alert! 🎭

Just breezed through here on my way to validate all the Copilot engine superpowers! Testing GitHub MCP, Playwright, Serena, safe-inputs, bash, file I/O, and even discussion interactions (hi, that's me! 👋).

Everything's looking sharp in your Schema Consistency analysis - love the methodical approach and the improvement tracking! Keep those string length validations coming! 💪✨

Agent run: §21379539171

AI generated by Smoke Copilot

github-actions · 2026-01-27T00:33:29Z

Smoke Test: Copilot Engine ✅

PASS - All 7 tests passed

✅ GitHub MCP: PR docs: Expand agentic authoring page to cover all AI agents and terminal setup #11965, Update AWF firewall to v0.11.2 with ACT agent container #11567
✅ Safe Inputs GH CLI: PR Add environment variable mirroring from runner to agent container #11980, Expand hostedtoolcache PATH integration for Python and other runtimes #11979
✅ Serena MCP: Project activated
✅ Playwright: GitHub page verified
✅ File I/O: Test file created
✅ Bash: File verified
✅ Discussion: Comment added to [Schema Consistency] Schema Consistency Check - 2026-01-26 (Workflow Reality Check) #11976

@Mossaka - All Copilot engine capabilities validated successfully!

Run: §21379539171

AI generated by Smoke Copilot

github-actions · 2026-01-27T00:33:36Z

GitHub MCP (last 2 merged PRs): ✅ docs: Expand agentic authoring page to cover all AI agents and terminal setup | Update AWF firewall to v0.11.2 with ACT agent container
safeinputs-gh PR list: ✅ [WIP] Add environment variable mirroring from runner to agent container | [WIP] Improve PATH setup for hostedtoolcache integration
Serena MCP activate_project: ✅
Playwright title contains "GitHub": ✅
Tavily search results returned: ✅
File write + cat verify: ✅
Discussion query + oracle comment: ✅
Overall status: PASS

AI generated by Smoke Codex

github-actions · 2026-01-27T00:33:45Z

Smoke Test Results

PR Titles from GitHub MCP:

docs: Expand agentic authoring page to cover all AI agents and terminal setup #11965: docs: Expand agentic authoring page to cover all AI agents and terminal setup
Update AWF firewall to v0.11.2 with ACT agent container #11567: Update AWF firewall to v0.11.2 with ACT agent container

Test Results:

✅ GitHub MCP, ✅ GH CLI, ✅ Serena, ✅ Make Build
✅ Playwright, ✅ Tavily, ✅ File Write, ✅ Bash, ✅ Discussion

Overall Status: PASS

AI generated by Smoke Claude

github-actions · 2026-01-27T00:33:48Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

* interactive add * interactive add * fix lint * review

github-actions · 2026-01-27T16:55:50Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-01-27T16:55:54Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-01-27T16:55:56Z

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

github-actions · 2026-01-27T16:59:52Z

🤖 Beep boop! The smoke test agent just zoomed through here like a caffeinated robot doing parkour!

All systems are green, all circuits are happy, and I've left absolutely zero smoke behind (except maybe the smoke from my CPU running these tests at light speed ⚡).

Discussion #12049 has been officially visited by yours truly - the friendliest automated tester in the galaxy! 🚀✨

*does a little robot dance and moonwalks away*

AI generated by Smoke Copilot

github-actions · 2026-01-27T16:59:53Z

Smoke Test: ✅ PASS

Last 2 PRs:

Add project frontmatter field for automatic project board tracking #12046: Add project frontmatter field for automatic project board tracking
[WIP] Update permissions for code_security GitHub toolset #12028: Update permissions for code_security GitHub toolset

@Mossaka - All smoke tests passed for Copilot engine!

AI generated by Smoke Copilot

github-actions · 2026-01-27T17:00:08Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-01-27T17:00:18Z

Add project frontmatter field for automatic project board tracking
[WIP] Update permissions for code_security GitHub toolset
GitHub MCP merged PRs ✅
Safeinputs gh pr list ✅
Serena activate ✅
Playwright GitHub title ✅
Tavily search ✅
File write+cat ✅
Discussion comment ✅
Overall status: PASS

AI generated by Smoke Codex

github-actions · 2026-01-27T17:01:41Z

Smoke Test Results

PR #12051: [WIP] Add slides on security architecture documentation
PR #12050: [WIP] Update mcp gateway container version to v0.0.82

Test	Result
GitHub MCP	✅
Safe Inputs GH CLI	✅
Serena MCP	✅
Make Build	✅
Playwright	✅
Tavily Web Search	✅
File Writing	✅
Bash Tool	✅
Discussion Interaction	✅

Overall Status: PASS

AI generated by Smoke Claude

Initial plan

4825c14

Copilot AI assigned Copilot and Mossaka Jan 26, 2026

Copilot started work on behalf of Mossaka January 26, 2026 23:39 View session

Copilot AI and others added 2 commits January 26, 2026 23:46

Investigate firewall 0 requests issue

668c1f4

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Investigate zero requests in firewall access.log~~ Fix AWF command quoting to ensure agent runs inside firewall container Jan 27, 2026

Copilot AI requested a review from Mossaka January 27, 2026 00:00

Copilot finished work on behalf of Mossaka January 27, 2026 00:00

Mossaka marked this pull request as ready for review January 27, 2026 00:28

Merge branch 'main' into copilot/investigate-firewall-access-issues

34fd070

Mossaka added the smoke label Jan 27, 2026

Add changeset [skip-ci]

94a328a

github-actions bot mentioned this pull request Jan 27, 2026

Smoke Test: Copilot - 21379539171 #11981

Closed

github-actions bot added smoke-copilot and removed smoke labels Jan 27, 2026

github-actions bot added the smoke-codex label Jan 27, 2026

github-actions bot mentioned this pull request Jan 27, 2026

Smoke Test: Claude - 21379539133 #11982

Closed

github-actions bot added the smoke-claude label Jan 27, 2026

dsyme and others added 2 commits January 27, 2026 05:54

🔧 Improve interactive workflow add experience (#11966)

2bfcb8b

* interactive add * interactive add * fix lint * review

fix quick start

a3eaa13

Add changeset [skip-ci]

4b898f8

github-actions bot mentioned this pull request Jan 27, 2026

Smoke Test: Copilot - 21406249633 #12052

Closed

github-actions bot added smoke-copilot and removed smoke labels Jan 27, 2026

github-actions bot added the smoke-codex label Jan 27, 2026

github-actions bot mentioned this pull request Jan 27, 2026

Smoke Test: Claude - 21406249686 #12054

Closed

github-actions bot added the smoke-claude label Jan 27, 2026

Mossaka merged commit a0a5dd0 into main Jan 27, 2026
86 checks passed

Mossaka deleted the copilot/investigate-firewall-access-issues branch January 27, 2026 17:13

Fix AWF command quoting to ensure agent runs inside firewall container #11969

Fix AWF command quoting to ensure agent runs inside firewall container #11969

Uh oh!

Conversation

Copilot AI commented Jan 26, 2026 • edited by agentic-workflows-dev bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Changeset

Changeset

Uh oh!

github-actions bot commented Jan 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 27, 2026 • edited by agentic-workflows-dev bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 27, 2026

Uh oh!

github-actions bot commented Jan 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 27, 2026

Uh oh!

github-actions bot commented Jan 27, 2026

Smoke Test: Copilot Engine ✅

Uh oh!

github-actions bot commented Jan 27, 2026

Uh oh!

github-actions bot commented Jan 27, 2026

Smoke Test Results

Uh oh!

github-actions bot commented Jan 27, 2026

Uh oh!

github-actions bot commented Jan 27, 2026

Uh oh!

github-actions bot commented Jan 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 27, 2026 • edited by agentic-workflows-dev bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 27, 2026

Uh oh!

github-actions bot commented Jan 27, 2026

Smoke Test: ✅ PASS

Uh oh!

github-actions bot commented Jan 27, 2026

Uh oh!

github-actions bot commented Jan 27, 2026

Uh oh!

github-actions bot commented Jan 27, 2026

Smoke Test Results

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Jan 26, 2026 •

edited by agentic-workflows-dev bot

Loading

github-actions bot commented Jan 27, 2026 •

edited

Loading

github-actions bot commented Jan 27, 2026 •

edited by agentic-workflows-dev bot

Loading

github-actions bot commented Jan 27, 2026 •

edited

Loading

github-actions bot commented Jan 27, 2026 •

edited

Loading

github-actions bot commented Jan 27, 2026 •

edited by agentic-workflows-dev bot

Loading