[aw] PR Code Quality Reviewer failed

[github-actions]

Workflow Failure

Workflow: PR Code Quality Reviewer
Branch: copilot/fix-copilot-issue
Run: https://github.com/github/gh-aw/actions/runs/30647761131
Pull Request: #49360

Warning

Engine Rate Limited (HTTP 429): The copilot engine hit provider rate limits and could not complete this run.

This signal was detected from engine runtime logs/OTLP telemetry.

What to do next

• Retry the workflow after a short delay.
• If this keeps happening, reduce concurrent workflow volume or review provider quota/rate-limit policies.

Action Required

Assign this issue to an agent to debug and fix the issue.

Debug with any coding agent

Use this prompt with any coding agent (GitHub Copilot, Claude, Gemini, etc.):

Debug the agentic workflow failure using https://raw.githubusercontent.com/github/gh-aw/main/debug.md

The failed workflow run is at https://github.com/github/gh-aw/actions/runs/30647761131

Manually invoke the agent

Debug this workflow failure using your favorite Agent CLI and the agentic-workflows prompt.

• Start your agent
• Load the agentic-workflows skill from .github/skills/agentic-workflows/SKILL.md or https://github.com/github/gh-aw/blob/main/.github/skills/agentic-workflows/SKILL.md
• Type debug the agentic workflow pr-code-quality-reviewer failure in https://github.com/github/gh-aw/actions/runs/30647761131

Tip

Stop reporting this workflow as a failure

To stop a workflow from creating failure issues, set report-failure-as-issue: false in its frontmatter:

safe-outputs:
  report-failure-as-issue: false

Generated from PR Code Quality Reviewer · 11.4 AIC · ◷

• expires on Aug 1, 2026, 4:46 AM UTC

[pelikhan]

@copilot better title

[github-actions]

Agent job 30677439144 failed.

Warning

Engine Failure: The copilot engine terminated unexpectedly.

Last agent output:

{"type":"tool.execution_complete","timestamp":"2026-08-01T01:23:22.833Z","data":{"toolName":"bash","mcpServerName":"","success":true,"result":{"content":"true\nfalse\n^refs\\/heads\\/release\\/[^/]*$\n<shellId: 40 completed with exit code 0>","detailedContent":"true\nfalse\n^refs\\/heads\\/release\\/[^/]*$\n<shellId: 40 completed with exit code 0>"}}}
{"type":"assistant.message","timestamp":"2026-08-01T01:23:26.861Z","data":{"content":"That's fine — expected glob semantics (single `*` doesn't cross `/`). Now let's check the smoke lock.yml diffs briefly for consistency (auto-generated, likely fine)."}}
{"type":"tool.execution_start","timestamp":"2026-08-01T01:23:26.863Z","data":{"toolName":"bash","mcpServerName":"","command":"sed -n '1,20p' /tmp/1785547028817-copilot-tool-output-124-4d80cdd0-17e7-4373-bc82-ec24423f68cb.txt"}}
{"type":"tool.execution_complete","timestamp":"2026-08-01T01:23:26.922Z","data":{"toolName":"bash","mcpServerName":"","success":true,"result":{"content":"diff --git a/.github/workflows/smoke-copilot-aoai-apikey.lock.yml b/.github/workflows/smoke-copilot-aoai-apikey.lock.yml\nindex bef4ba5f65a..5ec93972a4c 100644\n--- a/.github/workflows/smoke-copilot-aoai-apikey.lock.yml\n+++ b/.github/workflows/smoke-copilot-aoai-apikey.lock.yml\n@@ -1057,6 +1057,14 @@ jobs:\n                   \"inputs\": {\n                     \"type\": \"object\"\n                   },\n+                  \"ref\": {\n+                    \"type\": \"string\",\n+                    \"sanitize\": true,\n+                    \"maxLength\": 256,\n+                    \"minLength\": 1,\n+                    \"pattern\": \".*\\\\S.*\",\n+                    \"patternError\": \"must not be empty\"\n+                  },\n                   \"workflow_name\": {\n                     \"required\": true,\n                     \"type\": \"string\",\ndiff --git a/.github/workflows/smoke-copilot-aoai-entra.lock.yml b/.github/workflows/smoke-copilot-aoai-entra.lock.yml\n<shellId: 41 completed with exit code 0>","detailedContent":"diff --git a/.github/workflows/smoke-copilot-aoai-apikey.lock.yml b/.github/workflows/smoke-copilot-aoai-apikey.lock.yml\nindex bef4ba5f65a..5ec93972a4c 100644\n--- a/.github/workflows/smoke-copilot-aoai-apikey.lock.yml\n+++ b/.github/workflows/smoke-copilot-aoai-apikey.lock.yml\n@@ -1057,6 +1057,14 @@ jobs:\n                   \"inputs\": {\n                     \"type\": \"object\"\n                   },\n+                  \"ref\": {\n+                    \"type\": \"string\",\n+                    \"sanitize\": true,\n+                    \"maxLength\": 256,\n+                    \"minLength\": 1,\n+                    \"pattern\": \".*\\\\S.*\",\n+                    \"patternError\": \"must not be empty\"\n+                  },\n                   \"workflow_name\": {\n                     \"required\": true,\n                     \"type\": \"string\",\ndiff --git a/.github/workflows/smoke-copilot-aoai-entra.lock.yml b/.github/workflows/smoke-copilot-aoai-entra.lock.yml\n<shellId: 41 completed with exit code 0>"}}}
{"type":"assistant.message","timestamp":"2026-08-01T01:23:37.072Z","data":{"content":"Confirms compiled artifacts, generated correctly. Now checking grumpy-coder sub-agent in background while I finalize my primary findings."}}
{"type":"tool.execution_start","timestamp":"2026-08-01T01:23:37.073Z","data":{"toolName":"task","mcpServerName":""}}
{"type":"subagent.started","timestamp":"2026-08-01T01:23:37.086Z","data":{"agentName":"general-purpose","agentDisplayName":"General Purpose Agent","toolCallId":"toolu_018UBKVPK2n9hpjLMkCTRo2m"}}
{"type":"tool.execution_complete","timestamp":"2026-08-01T01:23:37.092Z","data":{"toolName":"task","mcpServerName":"","success":true,"result":{"content":"Agent started in background with agent_id: grumpy-coder. You'll be notified when it completes. Tell the user you're waiting and end your response, or continue unrelated work until notified. The agent supports multi-turn conversations — use write_agent to send follow-up messages.","detailedContent":"Prompt to general-purpose agent (grumpy-coder):\nYou are a highly critical, grumpy senior code reviewer analyzing a PR diff for github/gh-aw (PR #49408). The PR adds a per-call `ref` override to the `dispatch_workflow` safe output, gated by an `allowed-refs` allowlist of glob patterns.\n\nRead the diff at /tmp/gh-aw/agent/pr-diff.patch and PR metadata at /tmp/gh-aw/agent/pr-meta.json.\n\nFocus especially on these changed files:\n- actions/setup/js/dispatch_workflow.cjs (core logic: ref resolution priority, allowed-refs glob validation, normalizeRef/normalizeRefPattern functions)\n- actions/setup/js/dispatch_workflow.test.cjs (new tests)\n- pkg/workflow/dispatch_workflow.go (new AllowedRefs config field)\n- pkg/workflow/safe_outputs_validation_config.go (new \"ref\" field validation with Sanitize: true)\n- pkg/workflow/safe_outputs_handler_registry.go\n- pkg/parser/schemas/main_workflow_schema.json\n- schemas/agent-output.json\n\nFind correctness bugs, security issues (e.g., ref injection, path traversal via ref, regex/glob bypass), edge cases (empty allowed-refs, refs with special glob chars, refs containing slashes vs single \"*\" glob semantics not matching multi-segment paths), maintainability issues, and missing test coverage. Also check whether the \"ref\" field's `Sanitize: true` validation config (which runs generic content sanitization intended for markdown/text bodies — including `@mention` neutralization, URL redaction, XML tag conversion, truncation) is appropriate for a git ref value, and whether that sanitization could corrupt legitimate branch names.\n\nOutput STRICT JSONL: one JSON object per line, each with fields: file, line (approximate, best-effort based on diff context), severity (critical/high/medium/low), title, description. No prose outside JSONL. No markdown fences."}}}
[copilot-sdk-driver] [sdk-driver] error: Execution failed: Error: No model available. Check policy enablement under GitHub Settings > Copilot
{"type":"subagent.completed","timestamp":"2026-08-01T01:23:37.166Z","data":{"agentName":"general-purpose","toolCallId":"toolu_018UBKVPK2n9hpjLMkCTRo2m"}}

Generated from PR Code Quality Reviewer · 81.7 AIC · ◷