Enable sandbox.agent.sudo: false on 20 agentic workflows by Copilot · Pull Request #41628 · github/gh-aw

Copilot · 2026-06-26T07:13:49Z

Hardens the agent sandbox by disabling sudo across 20 workflows that were missing the sandbox.agent.sudo: false setting.

Changes

11 workflows (artifacts-summary, copilot-pr-nlp-analysis, daily-hippo-learn, daily-news, daily-repo-chronicle, firewall-escape, firewall, hippo-embed, mcp-inspector, research, weekly-issue-summary): expanded agent: awf shorthand to block form to accommodate the new field:
```
sandbox:
  agent:
    id: awf
    sudo: false
```
2 workflows (avenger, hourly-ci-cleaner): added sudo: false to existing expanded agent: block (alongside id: awf and mounts)
3 workflows (smoke-claude, smoke-pi, step-name-alignment): added sudo: false to agent: blocks that only had config:
1 workflow (glossary-maintainer): flipped sudo: true → sudo: false
1 workflow (design-decision-gate): added agent: sudo: false to sandbox that previously only configured mcp:
2 workflows (audit-workflows, ci-coach): added sandbox: agent: sudo: false from scratch

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot

Pull request overview

This PR hardens multiple gh-aw agentic workflows by explicitly disabling sudo in the agent sandbox (sandbox.agent.sudo: false), updating workflow frontmatter where needed and regenerating affected compiled lockfiles.

Changes:

Added sandbox.agent.sudo: false across the targeted workflows (expanding agent: awf shorthand to block form where necessary).
Updated compiled .lock.yml outputs accordingly (including rootless AWF install/exec paths and related sandbox/network plumbing changes).

Show a summary per file

File	Description
.github/workflows/weekly-issue-summary.md	Expanded `sandbox.agent` to include `sudo: false`.
.github/workflows/weekly-issue-summary.lock.yml	Regenerated compiled workflow reflecting rootless / sandbox updates.
.github/workflows/step-name-alignment.md	Added `sandbox.agent.sudo: false` to existing agent config.
.github/workflows/smoke-pi.md	Added `sandbox.agent.sudo: false` to existing agent config.
.github/workflows/smoke-pi.lock.yml	Regenerated compiled workflow reflecting rootless / sandbox updates.
.github/workflows/smoke-claude.md	Added `sandbox.agent.sudo: false` to existing agent config.
.github/workflows/research.md	Expanded `sandbox.agent` to include `sudo: false`.
.github/workflows/research.lock.yml	Regenerated compiled workflow reflecting rootless / sandbox updates.
.github/workflows/mcp-inspector.md	Expanded `sandbox.agent` to include `sudo: false`.
.github/workflows/hourly-ci-cleaner.md	Added `sudo: false` to existing expanded `sandbox.agent` block.
.github/workflows/hippo-embed.md	Expanded `sandbox.agent` to include `sudo: false`.
.github/workflows/hippo-embed.lock.yml	Regenerated compiled workflow reflecting rootless / sandbox updates.
.github/workflows/glossary-maintainer.md	Flipped `sandbox.agent.sudo` from `true` to `false`.
.github/workflows/firewall.md	Expanded `sandbox.agent` to include `sudo: false`.
.github/workflows/firewall.lock.yml	Regenerated compiled workflow reflecting rootless / sandbox updates.
.github/workflows/firewall-escape.md	Expanded `sandbox.agent` to include `sudo: false`.
.github/workflows/firewall-escape.lock.yml	Regenerated compiled workflow reflecting rootless / sandbox updates.
.github/workflows/design-decision-gate.md	Added `sandbox.agent.sudo: false` alongside existing `sandbox.mcp` config.
.github/workflows/daily-repo-chronicle.md	Expanded `sandbox.agent` to include `sudo: false`.
.github/workflows/daily-news.md	Expanded `sandbox.agent` to include `sudo: false`.
.github/workflows/daily-hippo-learn.md	Expanded `sandbox.agent` to include `sudo: false`.
.github/workflows/daily-hippo-learn.lock.yml	Regenerated compiled workflow reflecting rootless / sandbox updates.
.github/workflows/copilot-pr-nlp-analysis.md	Expanded `sandbox.agent` to include `sudo: false`.
.github/workflows/copilot-pr-nlp-analysis.lock.yml	Regenerated compiled workflow reflecting rootless / sandbox updates.
.github/workflows/ci-coach.md	Added `sandbox.agent.sudo: false` (new sandbox section).
.github/workflows/ci-coach.lock.yml	Regenerated compiled workflow reflecting rootless / sandbox updates.
.github/workflows/avenger.md	Added `sudo: false` to existing expanded `sandbox.agent` block.
.github/workflows/audit-workflows.md	Added `sandbox.agent.sudo: false` (new sandbox section).
.github/workflows/artifacts-summary.md	Expanded `sandbox.agent` to include `sudo: false`.
.github/workflows/artifacts-summary.lock.yml	Regenerated compiled workflow reflecting rootless / sandbox updates.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 40/40 changed files
Comments generated: 12
Review effort level: Low

+  agent:
+    id: awf
+    sudo: false


+  agent:
+    id: awf
+    sudo: false


+  agent:
+    id: awf
+    sudo: false


+  agent:
+    id: awf
+    sudo: false


+  agent:
+    id: awf
+    sudo: false


+  agent:
+    id: awf
+    sudo: false


+  agent:
+    id: awf
+    sudo: false


          esac
          DOCKER_SOCK_GID=$(stat -c '%g' "$DOCKER_SOCK_PATH" 2>/dev/null || echo '0')
-          export MCP_GATEWAY_DOCKER_COMMAND='docker run -i --rm --network host --name awmg-mcpg --add-host host.docker.internal:127.0.0.1 --user '"${MCP_GATEWAY_UID}"':'"${MCP_GATEWAY_GID}"' --group-add '"${DOCKER_SOCK_GID}"' -v '"${DOCKER_SOCK_PATH}"':/var/run/docker.sock -e MCP_GATEWAY_PORT -e MCP_GATEWAY_DOMAIN -e MCP_GATEWAY_API_KEY -e MCP_GATEWAY_PAYLOAD_DIR -e MCP_GATEWAY_PAYLOAD_SIZE_THRESHOLD -e DOCKER_HOST=unix:///var/run/docker.sock -e DEBUG -e MCP_GATEWAY_LOG_DIR -e GH_AW_MCP_LOG_DIR -e GH_AW_SAFE_OUTPUTS -e GH_AW_SAFE_OUTPUTS_CONFIG_PATH -e GH_AW_SAFE_OUTPUTS_TOOLS_PATH -e GH_AW_ASSETS_BRANCH -e GH_AW_ASSETS_MAX_SIZE_KB -e GH_AW_ASSETS_ALLOWED_EXTS -e DEFAULT_BRANCH -e GITHUB_MCP_SERVER_TOKEN -e GITHUB_MCP_GUARD_MIN_INTEGRITY -e GITHUB_MCP_GUARD_REPOS -e GITHUB_REPOSITORY -e GITHUB_SERVER_URL -e GITHUB_SHA -e GITHUB_WORKSPACE -e GITHUB_TOKEN -e GITHUB_RUN_ID -e GITHUB_RUN_NUMBER -e GITHUB_RUN_ATTEMPT -e GITHUB_JOB -e GITHUB_ACTION -e GITHUB_EVENT_NAME -e GITHUB_EVENT_PATH -e GITHUB_ACTOR -e GITHUB_ACTOR_ID -e GITHUB_TRIGGERING_ACTOR -e GITHUB_WORKFLOW -e GITHUB_WORKFLOW_REF -e GITHUB_WORKFLOW_SHA -e GITHUB_REF -e GITHUB_REF_NAME -e GITHUB_REF_TYPE -e GITHUB_HEAD_REF -e GITHUB_BASE_REF -e RUNNER_TEMP -e GITHUB_AW_OTEL_TRACE_ID -e GITHUB_AW_OTEL_PARENT_SPAN_ID -e OTEL_EXPORTER_OTLP_HEADERS -v /tmp/gh-aw/mcp-payloads:/tmp/gh-aw/mcp-payloads:rw -v /opt:/opt:ro -v /tmp:/tmp:rw -v '"${GITHUB_WORKSPACE}"':'"${GITHUB_WORKSPACE}"':rw -v '"${RUNNER_TEMP}"'/gh-aw/safeoutputs:'"${RUNNER_TEMP}"'/gh-aw/safeoutputs:rw ghcr.io/github/gh-aw-mcpg:v0.3.30'
+          export MCP_GATEWAY_DOCKER_COMMAND='docker run -i --rm --network bridge -p 127.0.0.1:'"${MCP_GATEWAY_PORT}"':'"${MCP_GATEWAY_PORT}"' --name awmg-mcpg --user '"${MCP_GATEWAY_UID}"':'"${MCP_GATEWAY_GID}"' --group-add '"${DOCKER_SOCK_GID}"' -v '"${DOCKER_SOCK_PATH}"':/var/run/docker.sock -e MCP_GATEWAY_PORT -e MCP_GATEWAY_DOMAIN -e MCP_GATEWAY_API_KEY -e MCP_GATEWAY_PAYLOAD_DIR -e MCP_GATEWAY_PAYLOAD_SIZE_THRESHOLD -e DOCKER_HOST=unix:///var/run/docker.sock -e DEBUG -e MCP_GATEWAY_LOG_DIR -e GH_AW_MCP_LOG_DIR -e GH_AW_SAFE_OUTPUTS -e GH_AW_SAFE_OUTPUTS_CONFIG_PATH -e GH_AW_SAFE_OUTPUTS_TOOLS_PATH -e GH_AW_ASSETS_BRANCH -e GH_AW_ASSETS_MAX_SIZE_KB -e GH_AW_ASSETS_ALLOWED_EXTS -e DEFAULT_BRANCH -e GITHUB_MCP_SERVER_TOKEN -e GITHUB_MCP_GUARD_MIN_INTEGRITY -e GITHUB_MCP_GUARD_REPOS -e GITHUB_REPOSITORY -e GITHUB_SERVER_URL -e GITHUB_SHA -e GITHUB_WORKSPACE -e GITHUB_TOKEN -e GITHUB_RUN_ID -e GITHUB_RUN_NUMBER -e GITHUB_RUN_ATTEMPT -e GITHUB_JOB -e GITHUB_ACTION -e GITHUB_EVENT_NAME -e GITHUB_EVENT_PATH -e GITHUB_ACTOR -e GITHUB_ACTOR_ID -e GITHUB_TRIGGERING_ACTOR -e GITHUB_WORKFLOW -e GITHUB_WORKFLOW_REF -e GITHUB_WORKFLOW_SHA -e GITHUB_REF -e GITHUB_REF_NAME -e GITHUB_REF_TYPE -e GITHUB_HEAD_REF -e GITHUB_BASE_REF -e RUNNER_TEMP -e GITHUB_AW_OTEL_TRACE_ID -e GITHUB_AW_OTEL_PARENT_SPAN_ID -e OTEL_EXPORTER_OTLP_HEADERS -v /tmp/gh-aw/mcp-payloads:/tmp/gh-aw/mcp-payloads:rw -v /opt:/opt:ro -v /tmp:/tmp:rw -v '"${GITHUB_WORKSPACE}"':'"${GITHUB_WORKSPACE}"':rw -v '"${RUNNER_TEMP}"'/gh-aw/safeoutputs:'"${RUNNER_TEMP}"'/gh-aw/safeoutputs:rw ghcr.io/github/gh-aw-mcpg:v0.3.30'


          GH_HOST: github.com
      - name: Install AWF binary
-        run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.11
+        run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.11 --rootless


          package-manager-cache: false
      - name: Install AWF binary
-        run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.11
+        run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.11 --rootless


Enable sandbox.agent.sudo: false on 20 agentic workflows

9fd8a1a

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI assigned Copilot and pelikhan Jun 26, 2026

Copilot created this pull request from a session on behalf of pelikhan June 26, 2026 07:14 View session

Copilot finished work on behalf of pelikhan June 26, 2026 07:14

Copilot AI requested a review from pelikhan June 26, 2026 07:14

github-actions Bot mentioned this pull request Jun 26, 2026

[PR Triage Report] PR Triage Report — 2026-06-26 [§28224135185] #41633

Closed

pelikhan marked this pull request as ready for review June 26, 2026 11:25

Copilot AI review requested due to automatic review settings June 26, 2026 11:25

pelikhan merged commit e613685 into main Jun 26, 2026

pelikhan deleted the copilot/enable-sandbox-agent-sudo-false branch June 26, 2026 11:25

Copilot AI reviewed Jun 26, 2026

View reviewed changes

github-actions Bot mentioned this pull request Jun 26, 2026

[aw] No-Op Runs #39849

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Enable sandbox.agent.sudo: false on 20 agentic workflows#41628

Enable sandbox.agent.sudo: false on 20 agentic workflows#41628
pelikhan merged 1 commit into
mainfrom
copilot/enable-sandbox-agent-sudo-false

Copilot AI commented Jun 26, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

Copilot AI commented Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Review details

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Jun 26, 2026 •

edited

Loading