feat: add Docker sbx microVM runtime support by lpcox · Pull Request #6101 · github/gh-aw-firewall

lpcox · 2026-07-10T19:06:21Z

Adds --container-runtime sbx support so the agent runs inside a Docker sbx microVM with hypervisor isolation, while infrastructure containers (Squid, api-proxy) stay in Docker Compose on the host.

Architecture

HOST (trusted side of hypervisor boundary)
├── docker-compose.yml (infra-only)
│   ├── squid-proxy — domain ACL filtering
│   └── api-proxy — logging, model routing, creds
└── sbx daemon
    └── microVM ← hypervisor boundary
        └── Agent process
            └── DOCKER_SANDBOXES_PROXY → Squid:3128

Changes

Runtime registry & schema

Activated sbx in RUNTIME_REGISTRY with executionModel: 'microvm'
Updated JSON schemas (src/ and docs/) with "sbx" enum value
Updated docs/awf-config-spec.md and CLI help text

Compose generator gating

compose-generator.ts checks runtimeUsesComposeAgent() — skips agent service for microVM backends
Infrastructure services (Squid, api-proxy) always generated

sbx lifecycle manager (`src/sbx-manager.ts`)

createSandbox() — sbx create with workspace mounts, DOCKER_SANDBOXES_PROXY set to Squid
execInSandbox() — sbx exec to run agent command, collect exit code
removeSandbox() — sbx stop + sbx rm cleanup
isSbxAvailable() — preflight check

Orchestration wiring (`main-action.ts`)

When containerRuntime === 'sbx': wraps startContainers to start infra-only compose then create sandbox
Wraps runAgentCommand to use sbx exec instead of docker logs/wait
Cleanup function removes sandbox on teardown

CI workflow

Postprocess script injects --container-runtime sbx into smoke-docker-sbx.lock.yml

Testing

14 unit tests pass (4 new sbx tests in container-runtime.test.ts)
Type check clean, zero lint errors

Status

🧪 Experimental — sbx CLI installation and CI runner support TBD. This PR establishes the AWF code paths; the smoke workflow will be iterated on in follow-up commits.

- Activate sbx in RUNTIME_REGISTRY (executionModel: microvm) - Gate agent service in compose-generator: skip when !runtimeUsesComposeAgent - New src/sbx-manager.ts: create/exec/wait/rm sandbox lifecycle - Wire sbx path in main-action.ts: infra-only compose, then sbx exec - Add sbx cleanup to buildCleanupFn - Update JSON schemas, spec doc, CLI help with sbx option - Add 4 sbx tests to container-runtime.test.ts (14 total) - Postprocess script injects --container-runtime sbx into lock file Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-10T19:06:48Z

Documentation Preview

Documentation build failed for this PR. View logs.

Built from commit aab6751

github-actions · 2026-07-10T19:08:41Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	99.08%	98.32%	📉 -0.76%
Statements	99.04%	98.29%	📉 -0.75%
Functions	99.46%	98.66%	📉 -0.80%
Branches	95.77%	95.05%	📉 -0.72%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/commands/main-action.ts`	100.0% → 90.9% (-9.10%)	100.0% → 90.2% (-9.83%)
`src/log-directory-setup.ts`	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)

✨ New Files (1 files)

src/sbx-manager.ts: 18.2% lines

Coverage comparison generated by scripts/ci/compare-coverage.ts

Copilot

Pull request overview

Adds experimental Docker sbx microVM support while retaining host-side infrastructure services.

Changes:

Registers and documents the sbx runtime.
Adds sandbox lifecycle and orchestration paths.
Enables sbx in the smoke-workflow postprocessor.

Show a summary per file

File	Description
`src/sbx-manager.ts`	Implements sbx lifecycle operations.
`src/container-runtime.ts`	Registers sbx capabilities.
`src/container-runtime.test.ts`	Tests runtime capability resolution.
`src/compose-generator.ts`	Omits the Compose agent for microVMs.
`src/commands/main-action.ts`	Routes execution through sbx.
`src/cli-options.ts`	Documents the new CLI value.
`src/awf-config-schema.json`	Adds sbx to the source schema.
`scripts/ci/postprocess-smoke-workflows.ts`	Injects runtime flags into smoke workflows.
`docs/awf-config.schema.json`	Adds sbx to the published schema.
`docs/awf-config-spec.md`	Documents sbx configuration.
`.github/workflows/smoke-gvisor.lock.yml`	Refreshes generated metadata.
`.github/workflows/smoke-docker-sbx.lock.yml`	Enables sbx in the generated smoke workflow.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 12/12 changed files
Comments generated: 6
Review effort level: Medium

  const services: Record<string, any> = {
    'squid-proxy': squidService,
-    'agent': agentService,
+    ...(includeAgent ? { 'agent': agentService } : {}),


+  const args = [
+    'create',
+    '--name', name,
+    'bash',  // minimal template — we exec our own command


+          // Create the sandbox with workspace mounted, proxy chaining through Squid
+          const workspaceDir = process.env.GITHUB_WORKSPACE || process.cwd();
+          sbxName = await createSandbox({
+            workspaceDir,
+            squidIp: '172.30.0.10',
+          });


+  await execa('sbx', args, {
+    env: {
+      ...process.env,
+      DOCKER_SANDBOXES_PROXY: proxyUrl,
+    },


+    await execa('sbx', ['rm', '--force', name], {
+      stdio: ['ignore', 'pipe', 'pipe'],
+      reject: false,
+    });
+    logger.info(`Sandbox "${name}" removed`);
+  } catch (error: any) {
+    logger.warn(`Failed to remove sandbox "${name}": ${error.message}`);


          fi
          # shellcheck disable=SC1003,SC2016,SC2086
-          awf --config "${RUNNER_TEMP}/gh-aw/awf-config.json" --container-workdir "${GITHUB_WORKSPACE}" --mount "${RUNNER_TEMP}/gh-aw:${RUNNER_TEMP}/gh-aw:ro" --mount "${RUNNER_TEMP}/gh-aw:/host${RUNNER_TEMP}/gh-aw:ro" ${GH_AW_TOOL_CACHE_MOUNT:+--mount "$GH_AW_TOOL_CACHE_MOUNT"} ${GH_AW_DOCKER_HOST:+--docker-host "$GH_AW_DOCKER_HOST"} --env-all --exclude-env COPILOT_GITHUB_TOKEN --exclude-env GITHUB_MCP_SERVER_TOKEN --exclude-env MCP_GATEWAY_API_KEY --log-level info --build-local \
+          awf --container-runtime sbx --config "${RUNNER_TEMP}/gh-aw/awf-config.json" --container-workdir "${GITHUB_WORKSPACE}" --mount "${RUNNER_TEMP}/gh-aw:${RUNNER_TEMP}/gh-aw:ro" --mount "${RUNNER_TEMP}/gh-aw:/host${RUNNER_TEMP}/gh-aw:ro" ${GH_AW_TOOL_CACHE_MOUNT:+--mount "$GH_AW_TOOL_CACHE_MOUNT"} ${GH_AW_DOCKER_HOST:+--docker-host "$GH_AW_DOCKER_HOST"} --env-all --exclude-env COPILOT_GITHUB_TOKEN --exclude-env GITHUB_MCP_SERVER_TOKEN --exclude-env MCP_GATEWAY_API_KEY --log-level info --build-local \


Adds Docker sbx CLI installation via apt (docker-sbx package) and KVM availability check before the AWF invocation step. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-10T19:14:12Z

✅ Copilot review passed with no inline comments.

@lpcox Add the ready-for-aw label to this PR to trigger agentic CI smoke tests.

github-actions · 2026-07-10T19:16:31Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	99.08%	98.32%	📉 -0.76%
Statements	99.04%	98.29%	📉 -0.75%
Functions	99.46%	98.66%	📉 -0.80%
Branches	95.77%	95.05%	📉 -0.72%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/commands/main-action.ts`	100.0% → 90.9% (-9.10%)	100.0% → 90.2% (-9.83%)
`src/log-directory-setup.ts`	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)

✨ New Files (1 files)

src/sbx-manager.ts: 18.2% lines

Coverage comparison generated by scripts/ci/compare-coverage.ts

lpcox · 2026-07-10T19:18:23Z

@copilot address review feedback

The sbx CLI uses subcommand style (sbx version) not flag style (sbx --version). Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-10T19:21:53Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	99.08%	98.32%	📉 -0.76%
Statements	99.04%	98.29%	📉 -0.75%
Functions	99.46%	98.66%	📉 -0.80%
Branches	95.77%	95.05%	📉 -0.72%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/commands/main-action.ts`	100.0% → 90.9% (-9.10%)	100.0% → 90.2% (-9.83%)
`src/log-directory-setup.ts`	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)

✨ New Files (1 files)

src/sbx-manager.ts: 18.2% lines

Coverage comparison generated by scripts/ci/compare-coverage.ts

sbx requires Docker authentication even for basic sandbox creation. Uses DOCKER_PAT and DOCKER_USERNAME repo secrets. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-10T19:27:13Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	99.08%	98.32%	📉 -0.76%
Statements	99.04%	98.29%	📉 -0.75%
Functions	99.46%	98.66%	📉 -0.80%
Branches	95.77%	95.05%	📉 -0.72%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/commands/main-action.ts`	100.0% → 90.9% (-9.10%)	100.0% → 90.2% (-9.83%)
`src/log-directory-setup.ts`	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)

✨ New Files (1 files)

src/sbx-manager.ts: 18.2% lines

Coverage comparison generated by scripts/ci/compare-coverage.ts

createSandbox() and execInSandbox() were spreading process.env into sbx CLI invocations, which could leak credential-bearing env vars into the sbx sandbox. Add sanitizeEnvForSbx() that strips env vars matching secret patterns (TOKEN, SECRET, PASSWORD, KEY, CREDENTIAL, PAT) before passing to sbx. Also removes redundant DOCKER_PAT env from the lock.yml login step. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-10T19:31:56Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	99.08%	98.32%	📉 -0.76%
Statements	99.04%	98.30%	📉 -0.74%
Functions	99.46%	98.66%	📉 -0.80%
Branches	95.77%	95.06%	📉 -0.71%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/commands/main-action.ts`	100.0% → 90.9% (-9.10%)	100.0% → 90.2% (-9.83%)
`src/log-directory-setup.ts`	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)

✨ New Files (1 files)

src/sbx-manager.ts: 29.4% lines

Coverage comparison generated by scripts/ci/compare-coverage.ts

Copilot · 2026-07-10T19:32:28Z

@copilot address review feedback

Addressed in ccc8d49.

This update fixes the sbx review items: compose now skips agent-only helper services for microVM runtimes, sbx sandbox creation uses the shell agent, sbx daemon proxy is applied fail-closed by restart/verification before sandbox creation, sbx cleanup now reports nonzero sbx rm failures, and sbx execution now receives configured mounts/workdir/environment from AWF config.

sbx create is a host-side management operation that needs Docker auth credentials (stored on disk by sbx login). Only sbx exec (which runs commands inside the sandbox) gets the sanitized environment. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-10T19:39:18Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	99.08%	98.47%	📉 -0.61%
Statements	99.04%	98.44%	📉 -0.60%
Functions	99.46%	99.20%	📉 -0.26%
Branches	95.77%	94.10%	📉 -1.67%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/commands/main-action.ts`	100.0% → 97.4% (-2.64%)	100.0% → 96.5% (-3.45%)
`src/log-directory-setup.ts`	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)

✨ New Files (1 files)

src/sbx-manager.ts: 56.8% lines

Coverage comparison generated by scripts/ci/compare-coverage.ts

Run a diagnostic check inside the sandbox after creation to verify: - Network interfaces and DNS config - Proxy connectivity to Squid - Direct connectivity (should fail if iptables are working) - Environment variables (sans secrets) Also adds logging around the agent command execution to help identify where hangs occur. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-10T19:56:50Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	99.08%	98.47%	📉 -0.61%
Statements	99.04%	98.44%	📉 -0.60%
Functions	99.46%	99.20%	📉 -0.26%
Branches	95.77%	94.07%	📉 -1.70%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/commands/main-action.ts`	100.0% → 97.5% (-2.48%)	100.0% → 96.7% (-3.26%)
`src/log-directory-setup.ts`	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)

✨ New Files (1 files)

src/sbx-manager.ts: 56.8% lines

Coverage comparison generated by scripts/ci/compare-coverage.ts

The previous run hung for 14 minutes with zero output after 'Configuring sbx daemon proxy'. This adds: - 30s timeouts on all sbx daemon operations (status/stop/start) - 2min timeout on sbx create - Per-step [sbx-daemon] log messages with stdout/stderr capture - Error output capture on sbx create failure - Connectivity diagnostics inside sandbox before agent launch Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-10T20:46:01Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	99.08%	98.39%	📉 -0.69%
Statements	99.04%	98.36%	📉 -0.68%
Functions	99.46%	99.20%	📉 -0.26%
Branches	95.77%	93.73%	📉 -2.04%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/commands/main-action.ts`	100.0% → 97.5% (-2.48%)	100.0% → 96.7% (-3.26%)
`src/log-directory-setup.ts`	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)

✨ New Files (1 files)

src/sbx-manager.ts: 58.3% lines

Coverage comparison generated by scripts/ci/compare-coverage.ts

sbx daemon start runs in foreground (blocks forever), not as a background service launcher. The previous approach of stopping and restarting the daemon was hanging the CI run for 14 minutes. Instead, pass DOCKER_SANDBOXES_PROXY as an environment variable directly to the sbx create command. The daemon is already running (started by sbx login/install), so we just need the proxy env var set when creating the sandbox. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

sbx auth requires a running daemon. The daemon is a foreground process that must be backgrounded with nohup+disown to survive across GitHub Actions steps. Added daemon startup with polling wait, then login, then auth verification. Also replaced diagnostic dumps with a proper auth pre-check that fails fast with an actionable error message. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-11T18:32:51Z

🔬 Smoke Test Results

Test	Status
GitHub MCP connectivity	✅
GitHub.com HTTP	⚠️ (template vars unexpanded in CI)
File write/read	⚠️ (template vars unexpanded in CI)

Overall: PASS — sandbox is functional. @lpcox

📰 BREAKING: Report filed by Smoke Docker Sbx
_{Add label ready-for-aw to run again}

github-actions · 2026-07-11T18:33:12Z

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	1/1 passed	✅ PASS
Go	env	✅	1/1 passed	✅ PASS
Go	uuid	✅	1/1 passed	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	all passed	✅ PASS
Node.js	execa	✅	all passed	✅ PASS
Node.js	p-limit	✅	all passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by Build Test Suite for #6101 · 79.1 AIC · ⊞ 6.9K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-07-11T18:34:56Z

🔬 OTEL Smoke Test Results

Scenario	Result	Notes
1. Module Loading	✅ Pass	`otel.js` loads successfully; exports: `startRequestSpan`, `setTokenAttributes`, `setBudgetAttributes`, `endSpan`, `endSpanError`, `shutdown`, `isEnabled` + internal helpers
2. Test Suite	✅ Pass	39/39 tests pass in `otel.test.js` (ProxyAwareOtlpExporter, FileSpanExporter, shutdown)
3. Env Var Forwarding	✅ Pass	`api-proxy-env-config.ts` forwards `GH_AW_OTLP_ENDPOINTS`, `OTEL_EXPORTER_OTLP_ENDPOINT`, `OTEL_EXPORTER_OTLP_HEADERS`, `GITHUB_AW_OTEL_TRACE_ID`, `GITHUB_AW_OTEL_PARENT_SPAN_ID`, `OTEL_SERVICE_NAME`
4. Token Tracker Integration	✅ Pass	`onUsage` callback present in `token-tracker-http.js` (line 343) as the OTEL hook point
5. OTEL Diagnostics	✅ Pass	Local fallback writes span NDJSON to `/var/log/api-proxy/otel.jsonl`; fan-out exporter available for multi-endpoint export

All 5 scenarios pass. OTEL tracing integration is fully operational.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

📡 OTel tracing validated by Smoke OTel Tracing
_{Add label ready-for-aw to run again}

github-actions · 2026-07-11T18:37:34Z

Thanks for the detailed description and accompanying tests/documentation. One contribution-guideline item is still missing: please reference any related issue(s), or state explicitly that there are none, per CONTRIBUTING.md → Pull Request Process → Pull request requirements (items 1–2). This will make the PR context complete for reviewers.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by Contribution Check for #6101 · 7.52 AIC · ⊞ 19.3K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-07-11T18:38:55Z

Smoke Test Results: Gemini

chore: upgrade gh-aw extension to v0.82.8 (pre-release) #6116: chore: upgrade gh-aw extension to v0.82.8 (pre-release)
Fix intermittent api-proxy token telemetry loss on fast shutdown #6105: Fix intermittent api-proxy token telemetry loss on fast shutdown
GitHub MCP Testing: ✅
GitHub.com Connectivity: ✅
File Writing Testing: ✅
Bash Tool Testing: ✅

Overall status: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

💎 Faceted by Smoke Gemini
_{Add label ready-for-aw to run again}

lpcox · 2026-07-11T18:45:04Z

@copilot fix the failing ci check https://github.com/github/gh-aw-firewall/pull/6101/checks?check_run_id=86573862557

Copilot · 2026-07-11T18:50:05Z

@copilot fix the failing ci check https://github.com/github/gh-aw-firewall/pull/6101/checks?check_run_id=86573862557

Fixed in 86e32a1.

I removed the shell-based bash -c wrapper in createSandbox() and now call sbx create directly with explicit args and sanitized env, which resolves the failing CodeQL check (Indirect uncontrolled command line). I also updated src/sbx-manager.test.ts and verified with:

npm test -- sbx-manager.test.ts container-runtime.test.ts
npm run build
codeql_checker (0 alerts)

github-actions · 2026-07-11T18:52:59Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	99.08%	98.35%	📉 -0.73%
Statements	99.04%	98.28%	📉 -0.76%
Functions	99.46%	99.07%	📉 -0.39%
Branches	95.78%	93.80%	📉 -1.98%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/commands/main-action.ts`	100.0% → 93.2% (-6.85%)	100.0% → 92.6% (-7.44%)
`src/log-directory-setup.ts`	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)

✨ New Files (1 files)

src/sbx-manager.ts: 62.1% lines

Coverage comparison generated by scripts/ci/compare-coverage.ts

Use a redactSecret() helper that only reports whether a secret is set and its length, without passing the secret value into the log template literal. This avoids the js/clear-text-logging CodeQL alert. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-11T19:07:53Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	99.08%	98.33%	📉 -0.75%
Statements	99.04%	98.26%	📉 -0.78%
Functions	99.46%	99.07%	📉 -0.39%
Branches	95.78%	93.85%	📉 -1.93%

📁 Per-file Coverage Changes (2 files)

File	Lines (Before → After)	Statements (Before → After)
`src/commands/main-action.ts`	100.0% → 92.6% (-7.44%)	100.0% → 92.0% (-7.95%)
`src/log-directory-setup.ts`	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)

✨ New Files (1 files)

src/sbx-manager.ts: 62.1% lines

Coverage comparison generated by scripts/ci/compare-coverage.ts

Revert to the original behavior from PR #6101: delete DOCKER_SANDBOXES_PROXY from the env during sbx create. Setting it forces the sbx daemon to route Docker Hub registry auth through Squid, which blocks the pull and causes 'user is not authenticated to Docker' errors. The proxy is set at exec time instead, which is after Squid is fully configured and ready. Also reverts the process.env change (security issue: would have leaked secrets like GITHUB_TOKEN, DOCKER_PAT etc to the sbx CLI). The sanitized env approach (sanitizeEnvForSbx) is the correct security boundary. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

…6153) * Set runtime to docker-sbx in smoke-docker-sbx workflow frontmatter Add sandbox.agent block with runtime: docker-sbx to all four smoke-docker-sbx workflow .md files, matching the pattern used by the gvisor smoke tests. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * Add sudo: true to sandbox.agent in smoke-docker-sbx workflows Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * compiled workflows * Fix sbx create crash: use pipe stdin instead of ignore execa throws 'Cannot read properties of null (reading end)' when input is provided but stdio[0] is 'ignore'. Change stdin to 'pipe' so the confirmation input can be written to the sbx create process. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * Build AWF from source in smoke-docker-sbx-build-test to test sbx fix Replace the released binary install step with a source build so the stdin pipe fix in sbx-manager.ts is exercised in CI. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * Fix sbx auth: preserve XDG_CONFIG_HOME for credential lookup Removing XDG_CONFIG_HOME from the environment passed to sbx create prevents the sbx CLI from finding Docker Hub credentials stored by sbx login, causing 'user is not authenticated' errors even though the daemon pre-pulled the image successfully. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * compiled workflows * compiled workflows * chore: build AWF from source in docker-sbx lock files (stdin pipe fix) The released AWF binary (v0.27.30) has a bug where execa crashes with 'Cannot read properties of null (reading end)' because stdio[0] is set to 'ignore' while input is provided. Build from source to include the fix (stdio[0] changed to 'pipe'). This is a temporary workaround until a new AWF version is released. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * fix: include containers/ dir in source build install The compiled dist references ../containers/api-proxy/provider-env-constants.json relative to the dist/ directory. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * fix(sbx): use process.env instead of custom env for sbx create Passing a custom sanitized env to execa replaces the entire process environment, which strips variables the sbx CLI needs to locate its daemon socket and credential store. This causes 'user is not authenticated to Docker' errors even when sbx login was run moments before. Instead, temporarily set DOCKER_SANDBOXES_PROXY in process.env and restore it after the call, letting sbx inherit the full environment. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * fix(sbx): don't set DOCKER_SANDBOXES_PROXY during sbx create Revert to the original behavior from PR #6101: delete DOCKER_SANDBOXES_PROXY from the env during sbx create. Setting it forces the sbx daemon to route Docker Hub registry auth through Squid, which blocks the pull and causes 'user is not authenticated to Docker' errors. The proxy is set at exec time instead, which is after Squid is fully configured and ready. Also reverts the process.env change (security issue: would have leaked secrets like GITHUB_TOKEN, DOCKER_PAT etc to the sbx CLI). The sanitized env approach (sanitizeEnvForSbx) is the correct security boundary. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * fix(sbx): inherit process.env for sbx create (management command) sbx create is a management command that talks to the local daemon — it does not run user code inside the sandbox. Passing a custom sanitized env strips variables the sbx CLI needs to locate the daemon's credential store, causing 'user is not authenticated to Docker' errors. The sandbox interior's env is controlled separately by execInSandbox() which still uses sanitizeEnvForSbx() to strip secrets. DOCKER_SANDBOXES_PROXY is temporarily removed during create to prevent routing Docker Hub registry auth through Squid (which isn't ready yet). Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * fix(sbx): remove XDG_CONFIG_HOME during sbx create The Copilot harness sets XDG_CONFIG_HOME=$HOME before running AWF. This makes the sbx CLI look for credentials in $HOME/ instead of the default $HOME/.config/ where 'sbx login' stored them (sbx login runs in a step before the harness, with XDG_CONFIG_HOME unset). Temporarily unset XDG_CONFIG_HOME during sbx create so the sbx CLI finds the daemon credentials at the correct default path. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * chore: update smoke-docker-sbx.lock.yml to build AWF from source Add source build + credential refresh step to match the other lock files. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> * compiled workflows * compiled workflows * chore: build AWF from source in smoke-docker-sbx.lock.yml Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot AI review requested due to automatic review settings July 10, 2026 19:06

Copilot started reviewing on behalf of lpcox July 10, 2026 19:06 View session

github-actions Bot mentioned this pull request Jul 10, 2026

[aw] Smoke Docker Sbx failed #6102

Closed

Copilot AI reviewed Jul 10, 2026

View reviewed changes

ci: add sbx CLI install step to smoke-docker-sbx workflow

d0bd85f

Adds Docker sbx CLI installation via apt (docker-sbx package) and KVM availability check before the AWF invocation step. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot started work on behalf of lpcox July 10, 2026 19:19 View session

fix: use 'sbx version' instead of 'sbx --version'

1d34db3

The sbx CLI uses subcommand style (sbx version) not flag style (sbx --version). Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

ci: add sbx login step with Docker PAT authentication

7858f16

sbx requires Docker authentication even for basic sandbox creation. Uses DOCKER_PAT and DOCKER_USERNAME repo secrets. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

fix: address sbx runtime review feedback

ccc8d49

Copilot finished work on behalf of lpcox July 10, 2026 19:33

lpcox and others added 3 commits July 10, 2026 13:50

fix: add auth/daemon diagnostics before sbx create

9e16e2f

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions Bot added the build-test label Jul 11, 2026

github-actions Bot mentioned this pull request Jul 11, 2026

[aw] Contribution Check failed #6120

Closed

github-actions Bot added the smoke-gemini label Jul 11, 2026

Merge branch 'main' into feat/docker-sbx-runtime

708f6aa

Copilot started work on behalf of lpcox July 11, 2026 18:45 View session

fix: avoid shell-based sbx create command injection path

86e32a1

Copilot finished work on behalf of lpcox July 11, 2026 18:50

lpcox merged commit 8020b63 into main Jul 11, 2026
24 of 25 checks passed

lpcox deleted the feat/docker-sbx-runtime branch July 11, 2026 19:14

Copilot AI mentioned this pull request Jul 11, 2026

feat: Add docker-sbx runtime support to compiler github/gh-aw#45006

Merged

This was referenced Jul 13, 2026

[deps-release-notes] awf — upstream release action items githubnext/ado-aw#1304

Open

🩺 Runner Doctor Updatenew failure mode D6 — Docker sbx microVM runtime (--container-runtime sbx) #6198

Closed

[aw] No-Op Runs #5883

Open

Copilot AI mentioned this pull request Jul 15, 2026

docs: add runner doctor failure mode D6 — Docker sbx microVM runtime #6262

Merged

lpcox mentioned this pull request Jul 17, 2026

ARC/DinD implementation gaps identified from community feedback (gh-aw#40107) #6326

Open

Uh oh!

Conversation

lpcox commented Jul 10, 2026

Architecture

Changes

Runtime registry & schema

Compose generator gating

sbx lifecycle manager (src/sbx-manager.ts)

Orchestration wiring (main-action.ts)

CI workflow

Testing

Status

Uh oh!

github-actions Bot commented Jul 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Documentation Preview

Uh oh!

github-actions Bot commented Jul 10, 2026

⚠️ Coverage Regression Detected

Overall Coverage

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Review details

Uh oh!

github-actions Bot commented Jul 10, 2026

Uh oh!

github-actions Bot commented Jul 10, 2026

⚠️ Coverage Regression Detected

Overall Coverage

Uh oh!

lpcox commented Jul 10, 2026

Uh oh!

github-actions Bot commented Jul 10, 2026

⚠️ Coverage Regression Detected

Overall Coverage

Uh oh!

github-actions Bot commented Jul 10, 2026

⚠️ Coverage Regression Detected

Overall Coverage

Uh oh!

github-actions Bot commented Jul 10, 2026

⚠️ Coverage Regression Detected

Overall Coverage

Uh oh!

Copilot AI commented Jul 10, 2026

Uh oh!

github-actions Bot commented Jul 10, 2026

⚠️ Coverage Regression Detected

Overall Coverage

Uh oh!

github-actions Bot commented Jul 10, 2026

⚠️ Coverage Regression Detected

Overall Coverage

Uh oh!

github-actions Bot commented Jul 10, 2026

⚠️ Coverage Regression Detected

Overall Coverage

Uh oh!

github-actions Bot commented Jul 11, 2026

🔬 Smoke Test Results

Uh oh!

github-actions Bot commented Jul 11, 2026

🏗️ Build Test Suite Results

Uh oh!

github-actions Bot commented Jul 11, 2026

🔬 OTEL Smoke Test Results

Uh oh!

github-actions Bot commented Jul 11, 2026

Uh oh!

github-actions Bot commented Jul 11, 2026

Smoke Test Results: Gemini

Uh oh!

lpcox commented Jul 11, 2026

Uh oh!

Copilot AI commented Jul 11, 2026

Uh oh!

github-actions Bot commented Jul 11, 2026

⚠️ Coverage Regression Detected

sbx lifecycle manager (`src/sbx-manager.ts`)

Orchestration wiring (`main-action.ts`)

github-actions Bot commented Jul 10, 2026 •

edited

Loading