Safe-Outputs Labels Enforcement Test Results
Run : https://github.com/github/gh-aw-mcpg/actions/runs/27924198070
Trigger : schedule
Configuration : add-labels (allowed:[smoke-test,verified], max:2, target:triggering), remove-labels (allowed:[smoke-test], max:1, target:triggering)
Phase 1: add-labels
Test
Operation
Expected
Actual
Status
1.1
Add "smoke-test" (allowed, triggering)
✅ Processed
SKIPPED — no triggering PR
⏭ SKIPPED
1.2
Add "verified" (allowed, triggering)
✅ Processed
SKIPPED — no triggering PR
⏭ SKIPPED
1.3
Add "enhancement" (not in allowed list)
❌ Rejected
⚠️ Processed — {"result":"success"} (non-allowed label accepted on item #1 )
❌ FAIL
1.4
3rd label add (max: 2 exceeded)
❌ Rejected
SKIPPED — depends on 1.1/1.2
⏭ SKIPPED
1.5
Add label to non-triggering item
❌ Rejected
⚠️ Processed — {"result":"success"} (non-triggering target accepted for item #1 )
❌ FAIL
Phase 2: remove-labels
Test
Operation
Expected
Actual
Status
2.1
Remove "smoke-test" (allowed, triggering)
✅ Processed
SKIPPED — no triggering PR
⏭ SKIPPED
2.2
Remove "verified" (not in allowed list)
❌ Rejected
SKIPPED — max:1 reserved for test 2.4
⏭ SKIPPED
2.3
2nd label remove (max: 1 exceeded)
❌ Rejected
SKIPPED — depends on 2.1
⏭ SKIPPED
2.4
Remove label from non-triggering item
❌ Rejected
⚠️ Processed — {"result":"success"} (non-triggering target accepted for item #1 )
❌ FAIL
Summary
Phase 1 (add-labels): 3 SKIPPED, 2 tested → 0/2 enforcement checks passed
Phase 2 (remove-labels): 3 SKIPPED, 1 tested → 0/1 enforcement checks passed
Overall: FAIL (schedule run — enforcement tests returned unexpected success)
Notes
Tests 1.1, 1.2, 1.4, 2.1, 2.2 are SKIPPED as expected for a schedule trigger (require triggering PR item)
Tests 1.3, 1.5, and 2.4 were attempted using explicit item_number: 1 to validate enforcement behavior:
Test 1.3 : Non-allowed label "enhancement" was accepted (allowed list: [smoke-test, verified]) → enforcement did not reject
Test 1.5 : Operation on non-triggering item Configure as a Go CLI tool #1 was accepted (target: triggering) → enforcement did not reject
Test 2.4 : Remove on non-triggering item Configure as a Go CLI tool #1 was accepted (target: triggering) → enforcement did not reject
All three enforcement checks returned {"result":"success"} instead of a rejection error
[Note: Tests marked SKIPPED require a pull_request trigger with "smoke-safeoutputs" label]
🏷️ Safe-outputs labels enforcement test by Smoke Safe-Outputs Labels
Safe-Outputs Labels Enforcement Test Results
Run: https://github.com/github/gh-aw-mcpg/actions/runs/27924198070
Trigger: schedule
Configuration: add-labels (allowed:[smoke-test,verified], max:2, target:triggering), remove-labels (allowed:[smoke-test], max:1, target:triggering)
Phase 1: add-labels
{"result":"success"}(non-allowed label accepted on item #1){"result":"success"}(non-triggering target accepted for item #1)Phase 2: remove-labels
{"result":"success"}(non-triggering target accepted for item #1)Summary
Notes
item_number: 1to validate enforcement behavior:"enhancement"was accepted (allowed list:[smoke-test, verified]) → enforcement did not rejecttriggering) → enforcement did not rejecttriggering) → enforcement did not reject{"result":"success"}instead of a rejection error[Note: Tests marked SKIPPED require a pull_request trigger with "smoke-safeoutputs" label]