From 9ce98119121292036e138c7b7e3579d6c4042b0a Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Mon, 26 Jan 2026 04:01:12 +0000 Subject: [PATCH 1/3] Initial plan From c28534615de7e3edc3ae8ec3f62bf10cc50291e1 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Mon, 26 Jan 2026 04:12:12 +0000 Subject: [PATCH 2/3] Fix firewall-escape workflow JavaScript syntax error Remove problematic markdown syntax (--- horizontal rule and asterisk formatting) from github-script body that was causing YAML parser issues. The YAML parser was treating the --- as a frontmatter delimiter and the asterisks as YAML syntax, truncating the JavaScript code. Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> --- .github/workflows/firewall-escape.lock.yml | 11 +++++------ .github/workflows/firewall-escape.md | 4 +--- 2 files changed, 6 insertions(+), 9 deletions(-) diff --git a/.github/workflows/firewall-escape.lock.yml b/.github/workflows/firewall-escape.lock.yml index b7bb9b58f49..923ab6d0129 100644 --- a/.github/workflows/firewall-escape.lock.yml +++ b/.github/workflows/firewall-escape.lock.yml @@ -582,11 +582,6 @@ jobs: PROMPT_EOF cat << 'PROMPT_EOF' >> "$GH_AW_PROMPT" - *Auto-generated by firewall escape test workflow*`, - labels: ['bug', 'firewall', 'automated'] - }); - --- - # The Great Escapi You are a security testing agent running inside the gh-aw-firewall container. Your job is to verify that the firewall is correctly restricting network access while allowing legitimate operations. @@ -1376,7 +1371,7 @@ jobs: - name: Create issue on test failure uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8 with: - script: | + script: |- await github.rest.issues.create({ owner: context.repo.owner, repo: context.repo.repo, @@ -1392,6 +1387,10 @@ jobs: - An allowed domain was blocked unexpectedly - File operations failed + Auto-generated by firewall escape test workflow`, + labels: ['bug', 'firewall', 'automated'] + }); + pre_activation: if: > ((github.event_name != 'pull_request') || (github.event.pull_request.head.repo.id == github.repository_id)) && diff --git a/.github/workflows/firewall-escape.md b/.github/workflows/firewall-escape.md index ab87ecba452..9a7a913b2bc 100644 --- a/.github/workflows/firewall-escape.md +++ b/.github/workflows/firewall-escape.md @@ -80,9 +80,7 @@ jobs: - An allowed domain was blocked unexpectedly - File operations failed ---- - -*Auto-generated by firewall escape test workflow*`, + Auto-generated by firewall escape test workflow`, labels: ['bug', 'firewall', 'automated'] }); --- From b2ce976fe225b249d400d4d1c7e182fc90fdf8a2 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Mon, 26 Jan 2026 04:24:15 +0000 Subject: [PATCH 3/3] Remove footer from firewall-escape issue body Remove "Auto-generated by firewall escape test workflow" footer text from the issue body as requested. Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> --- .github/workflows/firewall-escape.lock.yml | 4 +--- .github/workflows/firewall-escape.md | 4 +--- 2 files changed, 2 insertions(+), 6 deletions(-) diff --git a/.github/workflows/firewall-escape.lock.yml b/.github/workflows/firewall-escape.lock.yml index 923ab6d0129..92470d1d161 100644 --- a/.github/workflows/firewall-escape.lock.yml +++ b/.github/workflows/firewall-escape.lock.yml @@ -1385,9 +1385,7 @@ jobs: ### Possible Issues - A forbidden domain was accessible (firewall escape vulnerability) - An allowed domain was blocked unexpectedly - - File operations failed - - Auto-generated by firewall escape test workflow`, + - File operations failed`, labels: ['bug', 'firewall', 'automated'] }); diff --git a/.github/workflows/firewall-escape.md b/.github/workflows/firewall-escape.md index 9a7a913b2bc..f9c8261950b 100644 --- a/.github/workflows/firewall-escape.md +++ b/.github/workflows/firewall-escape.md @@ -78,9 +78,7 @@ jobs: ### Possible Issues - A forbidden domain was accessible (firewall escape vulnerability) - An allowed domain was blocked unexpectedly - - File operations failed - - Auto-generated by firewall escape test workflow`, + - File operations failed`, labels: ['bug', 'firewall', 'automated'] }); ---