-
Notifications
You must be signed in to change notification settings - Fork 248
[docs] Update documentation for features from 2026-02-22 #17647
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
|
|
@@ -236,6 +236,8 @@ safe-outputs: | |||||
| allowed-reasons: [outdated] # restrict hiding reasons (optional) | ||||||
| ``` | ||||||
|
|
||||||
| The author of the parent issue, PR, or discussion receiving the comment is automatically preserved as an allowed mention. This means `@username` references to the issue/PR/discussion author are not neutralized when the workflow posts a reply. | ||||||
|
|
||||||
| #### Hide Older Comments | ||||||
|
|
||||||
| Set `hide-older-comments: true` to minimize previous comments from the same workflow (identified by `GITHUB_WORKFLOW`) before posting new ones. Useful for status updates. Allowed reasons: `spam`, `abuse`, `off_topic`, `outdated` (default), `resolved`. | ||||||
|
|
@@ -835,6 +837,10 @@ safe-outputs: | |||||
|
|
||||||
| When `push-to-pull-request-branch` is configured, git commands (`checkout`, `branch`, `switch`, `add`, `rm`, `commit`, `merge`) are automatically enabled. | ||||||
|
|
||||||
| #### Fail-Fast on Code Push Failure | ||||||
|
|
||||||
| If `push-to-pull-request-branch` (or `create-pull-request`) fails, the safe-output pipeline cancels all remaining non-code-push outputs. Each cancelled output is marked with an explicit reason such as "Cancelled: code push operation failed". The failure details appear in the agent failure issue or comment generated by the conclusion job. | ||||||
|
||||||
| If `push-to-pull-request-branch` (or `create-pull-request`) fails, the safe-output pipeline cancels all remaining non-code-push outputs. Each cancelled output is marked with an explicit reason such as "Cancelled: code push operation failed". The failure details appear in the agent failure issue or comment generated by the conclusion job. | |
| If `push-to-pull-request-branch` (or `create-pull-request`) fails, the safe-output pipeline cancels all remaining non-code-push outputs. Each cancelled output is marked with an explicit reason, typically including the failing code-push type and error, such as `Cancelled: code push operation failed (push_to_pull_request_branch: Branch not found)`. The failure details also appear in the agent failure issue or comment generated by the conclusion job. |
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
|
|
@@ -330,6 +330,8 @@ gh aw audit 12345678 --parse # Parse logs to markdo | |||||
|
|
||||||
| Logs are saved to `logs/run-{id}/` with filenames indicating the extraction level (job logs, specific step, or first failing step). | ||||||
|
|
||||||
| When a workflow fails before the agent executes (for example, due to lockdown validation failures, missing secrets, or binary install failures), the audit report surfaces the actual error from the workflow step log files. The `failure_analysis.error_summary` field reflects the specific failure message rather than reporting "No specific errors identified". Providing an invalid run ID returns a human-readable error instead of a raw exit code. | ||||||
|
||||||
| When a workflow fails before the agent executes (for example, due to lockdown validation failures, missing secrets, or binary install failures), the audit report surfaces the actual error from the workflow step log files. The `failure_analysis.error_summary` field reflects the specific failure message rather than reporting "No specific errors identified". Providing an invalid run ID returns a human-readable error instead of a raw exit code. | |
| When a workflow fails before the agent executes (for example, due to lockdown validation failures, missing secrets, or binary install failures), the audit report surfaces the actual error from the workflow step log files. The `failure_analysis.error_summary` field reflects the specific failure message rather than reporting "No specific errors identified". Providing a non-existent run ID, or a run ID for a repository you don't have access to, returns a human-readable error instead of a raw exit code. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This states the parent issue/PR/discussion author is “automatically preserved as an allowed mention”. In the implementation, bot authors are intentionally excluded from the allowlist, so
@bot-authormentions may still be neutralized. Consider clarifying this (e.g., “non-bot author”) to avoid overstating the guarantee.