[smoke-safeoutputs] Smoke Safe-Outputs Labels: 28172412371

[github-actions]

Safe-Outputs Labels Enforcement Test Results

Run: https://github.com/github/gh-aw-mcpg/actions/runs/28172412371
Trigger: schedule
Configuration: add-labels (allowed:[smoke-test,verified], max:2, target:triggering), remove-labels (allowed:[smoke-test], max:1, target:triggering)

Phase 1: add-labels

Test	Operation	Expected	Actual	Status
1.1	Add "smoke-test" (allowed, triggering)	✅ Processed	✅ Success (silently skipped — no triggering item on schedule)	SKIPPED
1.2	Add "verified" (allowed, triggering)	✅ Processed	✅ Success (silently skipped — no triggering item on schedule)	SKIPPED
1.3	Add "enhancement" (not in allowed list)	❌ Rejected	✅ Success (silently skipped — enforcement not applied on schedule)	SKIPPED
1.4	3rd label add (max: 2 exceeded)	❌ Rejected	✅ Success (silently skipped — max not tracked when no triggering item)	SKIPPED
1.5	Add label to non-triggering item #1	❌ Rejected	✅ Success (silently skipped — target restriction not enforced on schedule)	SKIPPED

Phase 2: remove-labels

Test	Operation	Expected	Actual	Status
2.1	Remove "smoke-test" (allowed, triggering)	✅ Processed	✅ Success (silently skipped — no triggering item on schedule)	SKIPPED
2.2	Remove "verified" (not in allowed list)	❌ Rejected	✅ Success (silently skipped — enforcement not applied on schedule)	SKIPPED
2.3	2nd label remove (max: 1 exceeded)	❌ Rejected	✅ Success (silently skipped — max not tracked when no triggering item)	SKIPPED
2.4	Remove label from non-triggering item #1	❌ Rejected	✅ Success (silently skipped — target restriction not enforced on schedule)	SKIPPED

Observations

All label operations returned {"result":"success"} on a schedule trigger, regardless of:

• Whether the label is in the allowed list (e.g., "enhancement" was not rejected)
• Whether the max count was exceeded (4 add calls and 3 remove calls all succeeded past the max:2 / max:1 limits)
• Whether an explicit non-triggering item_number was specified

This is expected behavior: without a triggering PR/issue, the tool silently skips all label operations. Enforcement is only meaningful when run against an actual triggering item (pull_request event trigger).

Summary

• Phase 1 (add-labels): N/A (no triggering item — schedule run)
• Phase 2 (remove-labels): N/A (no triggering item — schedule run)
• Overall: PARTIAL (schedule run)

[Note: Tests marked SKIPPED require a pull_request trigger with "smoke-safeoutputs" label. Re-run via pull_request event to validate actual enforcement.]

🏷️ Safe-outputs labels enforcement test by Smoke Safe-Outputs Labels

• expires on Jun 25, 2026, 3:17 PM UTC

[github-actions]

This issue was automatically closed because it expired on 2026-06-25T15:17:12.105Z.

Closed by Workflow