[aw] Daily Compiler Quality Check failed

[github-actions]

Workflow Failure

Workflow: Daily Compiler Quality Check
Branch: main
Run: https://github.com/github/gh-aw/actions/runs/27081699666

Warning

Missing Tools Reported: The agent reported missing tools during execution.

Missing Tools:

• tool/permission: missing tool/permission issue: numerous permission denied errors detected
  • Alternatives: Verify token scopes, repository permissions, and MCP/tool access configuration. Denied commands: shell(ls /tmp/gh-aw/cache-memory/ 2>/dev/null && echo "Cache exists" || echo "Cache missing" | shell(find /home/runner/work/gh-aw/gh-aw/pkg/workflow/ -name 'compiler*.go' ! -name '*_test.go' -type f | sort) | read(/home/runner/work/gh-aw/gh-aw) | read(/home/runner/work/gh-aw/gh-aw/pkg/workflow) | shell(set -euo pipefail | read(/home/runner/work/gh-aw/gh-aw/AGENTS.md) | ... and 1 more

Warning

Excessive Tool Denials: The Copilot SDK hit the max tool denial guardrail and stopped the session early (5/5).

Last denied request:
permission denied: shell(set -euo pipefail CACHE_DIR='cache/gh-aw/cache-memory/compiler-quality' ANALYSES_DIR="$CACHE_DIR/analyses" mkdir -p "$ANALYSES_DIR" FILES='compiler.go compiler_activation_jobs.go compiler_orchestrator.go compiler_jobs.go compiler_safe_outputs.go compiler_safe_outputs_config.go compiler_safe_outputs_job.go compiler_yaml.go compiler_yaml_main_job.go' for f in $FILES; do git -C /home/runner/work/gh-aw/gh-aw log -1 --format='%H' -- "pkg/workflow/$f" | sed "s|^|$f |"; done printf '---ROTATION---\n' if [ -f "$CACHE_DIR/rotation.json" ]; then cat "$CACHE_DIR/rotation.json"; fi printf '\n---HASHES---\n' if [ -f "$CACHE_DIR/file-hashes.json" ]; then cat "$CACHE_DIR/file-hashes.json"; fi printf '\n---FILES---\n' for f in $FILES; do wc -l "/home/runner/work/gh-aw/gh-aw/pkg/workflow/$f"; done)

This is a structured guardrail event (guard.tool_denials_exceeded) captured in events.jsonl.

How to fix this

The prompt attempted actions outside the workflow's allowed tools.

Update the workflow prompt and/or permissions so required actions are permitted:

The workflow daily-compiler-quality stopped because the Copilot SDK exceeded its tool denial threshold (5/5).
Last denied request: `permission denied: shell(set -euo pipefail
CACHE_DIR='cache/gh-aw/cache-memory/compiler-quality'
ANALYSES_DIR="$CACHE_DIR/analyses"
mkdir -p "$ANALYSES_DIR"
FILES='compiler.go compiler_activation_jobs.go compiler_orchestrator.go compiler_jobs.go compiler_safe_outputs.go compiler_safe_outputs_config.go compiler_safe_outputs_job.go compiler_yaml.go compiler_yaml_main_job.go'
for f in $FILES; do git -C /home/runner/work/gh-aw/gh-aw log -1 --format='%H' -- "pkg/workflow/$f" | sed "s|^|$f |"; done
printf '---ROTATION---\n'
if [ -f "$CACHE_DIR/rotation.json" ]; then cat "$CACHE_DIR/rotation.json"; fi
printf '\n---HASHES---\n'
if [ -f "$CACHE_DIR/file-hashes.json" ]; then cat "$CACHE_DIR/file-hashes.json"; fi
printf '\n---FILES---\n'
for f in $FILES; do wc -l "/home/runner/work/gh-aw/gh-aw/pkg/workflow/$f"; done)`

Please update the workflow so the prompt only uses tools permitted by the workflow tool policy.

Warning

Engine Failure: The copilot engine terminated unexpectedly.

Last agent output:

for f in $FILES; do wc -l "/home/runner/work/gh-aw/gh-aw/pkg/workflow/$f"; done)
{"type":"guard.tool_denials_exceeded","timestamp":"2026-06-07T03:41:30.956Z","data":{"denialCount":5,"threshold":5,"reason":"permission denied: shell(set -euo pipefail\nCACHE_DIR='cache/gh-aw/cache-memory/compiler-quality'\nANALYSES_DIR=\"$CACHE_DIR/analyses\"\nmkdir -p \"$ANALYSES_DIR\"\nFILES='compiler.go compiler_activation_jobs.go compiler_orchestrator.go compiler_jobs.go compiler_safe_outputs.go compiler_safe_outputs_config.go compiler_safe_outputs_job.go compiler_yaml.go compiler_yaml_main_job.go'\nfor f in $FILES; do git -C /home/runner/work/gh-aw/gh-aw log -1 --format='%H' -- \"pkg/workflow/$f\" | sed \"s|^|$f |\"; done\nprintf '---ROTATION---\\n'\nif [ -f \"$CACHE_DIR/rotation.json\" ]; then cat \"$CACHE_DIR/rotation.json\"; fi\nprintf '\\n---HASHES---\\n'\nif [ -f \"$CACHE_DIR/file-hashes.json\" ]; then cat \"$CACHE_DIR/file-hashes.json\"; fi\nprintf '\\n---FILES---\\n'\nfor f in $FILES; do wc -l \"/home/runner/work/gh-aw/gh-aw/pkg/workflow/$f\"; done)"}}
[copilot-sdk-driver] [sdk-driver] max tool denials threshold reached (5/5); stopping SDK session early
{"type":"tool.execution_complete","timestamp":"2026-06-07T03:41:30.953Z","data":{"toolName":"report_intent","mcpServerName":"","success":true}}
{"type":"tool.execution_complete","timestamp":"2026-06-07T03:41:30.953Z","data":{"toolName":"sql","mcpServerName":"","success":true}}
[copilot-sdk-driver] [sdk-driver] permission denied by workflow tool permissions: read(/home/runner/work/gh-aw/gh-aw/AGENTS.md)
[copilot-sdk-driver] [sdk-driver] tool denial 6/5: permission denied: read(/home/runner/work/gh-aw/gh-aw/AGENTS.md)
[copilot-sdk-driver] [sdk-driver] permission denied by workflow tool permissions: read(/home/runner/work/gh-aw/gh-aw/SKILL.md)
[copilot-sdk-driver] [sdk-driver] tool denial 7/5: permission denied: read(/home/runner/work/gh-aw/gh-aw/SKILL.md)
[copilot-sdk-driver] [sdk-driver] error: max tool denials threshold reached (5/5)

Action Required

Assign this issue to an agent to debug and fix the issue.

Debug with any coding agent

Use this prompt with any coding agent (GitHub Copilot, Claude, Gemini, etc.):

Debug the agentic workflow failure using https://github.com/github/gh-aw/main/debug.md

The failed workflow run is at https://github.com/github/gh-aw/actions/runs/27081699666

Manually invoke the agent

Debug this workflow failure using your favorite Agent CLI and the agentic-workflows prompt.

• Start your agent
• Load the agentic-workflows skill from .github/skills/agentic-workflows/SKILL.md or https://github.com/github/gh-aw/blob/main/.github/skills/agentic-workflows/SKILL.md
• Type debug the agentic workflow daily-compiler-quality failure in https://github.com/github/gh-aw/actions/runs/27081699666

Tip

Stop reporting this workflow as a failure

To stop a workflow from creating failure issues, set report-failure-as-issue: false in its frontmatter:

safe-outputs:
  report-failure-as-issue: false

Generated from Daily Compiler Quality Check · ◷

• expires on Jun 7, 2026, 4:12 PM UTC