Fix Copilot proxy auth and GHEC model discovery by Copilot · Pull Request #8038 · github/gh-aw-firewall

Copilot · 2026-09-02T21:08:32Z

Fine-grained GitHub PATs were sent with the target-selected token scheme on Business, Enterprise, and GHEC endpoints. Canonical GHEC targets also missed GitHub-hosted model-discovery handling, while a legacy isolation placeholder could override the real GitHub credential for inference.

Credential selection
- Classify resolved GitHub credentials before selecting the Authorization scheme.
- Use Bearer for github_pat_ fine-grained PATs on every Copilot target.
- Preserve existing token behavior for OAuth and classic PATs on applicable targets.
- Reject placeholder-token-for-credential-isolation alongside current and offline BYOK placeholders.
GHEC request shape
- Treat canonical copilot-api.<tenant>.ghe.com targets as GitHub-hosted catalog endpoints.
- Apply X-GitHub-Api-Version: 2026-07-01 to startup and proxied /models.
- Resolve integration identity from COPILOT_INTEGRATION_ID, then GITHUB_COPILOT_INTEGRATION_ID, then the default.
- Preserve Copilot-Integration-Id for GHEC without synthesizing interaction headers.
Safe diagnostics
- Reflect credential kind, selected scheme, inference credential source, and integration-ID source without credential material.

const githubTokenAuthPrefix = getGitHubTokenAuthPrefix(githubToken, rawTarget, env);
// github_pat_* → ****** OAuth/classic PAT → token only where the target requires it

Fixes Copilot proxy mishandles fine-grained PATs and legacy provider placeholders on GHEC data-residency endpoints #8035

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot

🟡 Changes recommended

Three moderate issues leave integration-ID precedence, diagnostics, and GHEC header preservation incomplete.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Fixes Copilot authentication, GHEC model discovery, placeholder handling, and safe diagnostics.

Changes:

Selects authorization schemes by credential type.
Adds canonical GHEC request handling and integration identity support.
Rejects legacy credential-isolation placeholders.
Adds targeted regression tests.

Required fixes:

Forward GITHUB_COPILOT_INTEGRATION_ID into the sidecar environment.
Expose the new diagnostic fields through the management /reflect response.
Preserve caller-provided, case-variant integration IDs on GHEC requests.

File summaries

File	Description
`containers/api-proxy/request-headers.test.js`	Tests GHEC integration headers.
`containers/api-proxy/request-headers.js`	Recognizes GHEC hosts; integration-ID deduplication needs correction.
`containers/api-proxy/providers/copilot.js`	Updates authentication, discovery, identity, and diagnostics; environment forwarding and reflection output remain incomplete.
`containers/api-proxy/providers/copilot-auth.js`	Classifies credentials and rejects legacy placeholders.
`containers/api-proxy/copilot-auth.test.js`	Tests credential resolution and authorization schemes.
`containers/api-proxy/copilot-adapter-enterprise.test.js`	Adds GHEC and fine-grained PAT regression coverage.

Review details

Suppressed comments (1)

containers/api-proxy/providers/copilot.js:194

When Copilot uses an OIDC provider, resolveHeaders() sends a Bearer OIDC token, but these static values report credential_kind: none, inference_credential_source: none, and can even report token as the scheme on a GHES-classified target. Make the reflected values depend on oidcConfigured/authProvider; otherwise the new safe diagnostics misdescribe the credential actually used for inference.

        credential_kind: apiKey ? 'byok' : githubToken && githubToken.startsWith('github_pat_') ? 'fine_grained_pat' : githubToken ? 'github_token' : 'none',
        selected_scheme: authPrefix,
        inference_credential_source: inferenceCredentialSource,
        inference_selected_scheme: authPrefix,

Files reviewed: 6/6 changed files
Comments generated: 3
Review effort level: Balanced

💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

+  const integrationId = (env.COPILOT_INTEGRATION_ID || '').trim()
+    || (env.GITHUB_COPILOT_INTEGRATION_ID || '').trim()
+    || 'agentic-workflows';


      modelsPath,
      reflectionConfigured: !!authToken || oidcConfigured,
      reflectionModelsPath: modelsPath,
+      reflectionExtra: {


+  const copilotHost = isCopilotIntegrationHost(targetHost);
  for (const [name, value] of Object.entries(injectHeaders)) {
    if (!copilotHost && name.toLowerCase() === 'copilot-integration-id') continue;
    headers[name] = value;


lpcox · 2026-09-02T21:59:30Z

@copilot address review feedback

Copilot · 2026-09-02T22:05:07Z

@copilot address review feedback

Addressed all three review items in commit 09159cf: forwarded GITHUB_COPILOT_INTEGRATION_ID, preserved case-insensitive caller integration IDs for GHEC, and exposed the safe Copilot diagnostics through /reflect. Targeted and full API proxy tests pass.

github-actions · 2026-09-02T23:55:02Z

✅ Copilot review passed with no inline comments.

@copilot Add the ready-for-aw label to this PR to trigger agentic CI smoke tests.

github-actions · 2026-09-03T00:00:19Z

🛡️ Smoke Copilot Network Isolation confirmed the egress allowlist is enforced. ✅

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

example.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "example.com"

See Network Configuration for more information.

🛡️ Egress verdict from Smoke Copilot Network Isolation

github-actions · 2026-09-03T00:00:21Z

✅ Build Test Suite completed successfully!

Generated by Build Test Suite for #8038

github-actions · 2026-09-03T00:00:21Z

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

Tested by Smoke Chroot

github-actions · 2026-09-03T00:00:22Z

🔌 Smoke Services — All services reachable! ✅

🔌 Service connectivity validated by Smoke Services

github-actions · 2026-09-03T00:00:22Z

❌ Smoke Gemini reports failed. Facets need polishing...

💎 Faceted by Smoke Gemini

github-actions · 2026-09-03T00:00:24Z

❌ Contribution Check failed. Please review the logs for details.

Generated by Contribution Check for #8038

github-actions · 2026-09-03T00:00:24Z

📡 Smoke OTel Tracing completed. All tracing scenarios validated. ✅

📡 OTel tracing validated by Smoke OTel Tracing

github-actions · 2026-09-03T00:00:27Z

📰 VERDICT: Smoke Docker Sbx has concluded. All systems operational. This is a developing story. 🎤

📰 BREAKING: Report filed by Smoke Docker Sbx

github-actions · 2026-09-03T00:00:29Z

✅ Security Guard completed successfully!

Security review complete: PR #8038 contains no security vulnerabilities. The changes improve Copilot proxy auth handling (fine-grained PAT detection, GHEC model discovery, legacy placeholder filtering) while maintaining existing security boundaries. All 4 security-relevant files show defensive improvements with no weakened DROP/REJECT, expanded ACCEPT, auth regressions, or capability additions.

Generated by Security Guard for #8038

github-actions · 2026-09-03T00:00:56Z

✅ Smoke Claude passed

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.anthropic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.anthropic.com"

See Network Configuration for more information.

Generated by Smoke Claude for #8038

github-actions · 2026-09-03T00:04:05Z

Smoke Test: Claude Engine Validation

Check	Status
API	✅ PASS
gh CLI	✅ PASS
File	✅ PASS

Overall result: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.anthropic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.anthropic.com"

See Network Configuration for more information.

Generated by Smoke Claude for #8038 · claude · haiku45 · 58.3 AIC · ⊞ 4.5K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-09-03T00:04:13Z

Smoke Test: Copilot BYOK (Direct Mode) ✅ PASS

✅ MCP: 2 merged PRs (test: validate shared-gateway enclave smoke #8026, Mount the configured container working directory when no other mount exposes it #8021)
✅ HTTP: 200 (github.com reachable)
✅ File I/O: /tmp/gh-aw/agent/smoke-test-copilot-byok.txt confirmed
✅ BYOK Inference: Running via api-proxy → api.githubcopilot.com

Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY) with api-proxy sidecar injection.

🔑 BYOK report filed by Smoke Copilot BYOK
_{Add label ready-for-aw to run again}

github-actions · 2026-09-03T00:04:17Z

@lpcox Egress smoke test results:

EGRESS_RESULT allow=pass deny=pass

✅ Allowed domain (github.com) reachable — allowed=200
✅ Blocked domain (example.com) denied — CONNECT tunnel 403

Overall: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

example.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "example.com"

See Network Configuration for more information.

🛡️ Egress verdict from Smoke Copilot Network Isolation
_{Add label ready-for-aw to run again}

github-actions · 2026-09-03T00:04:17Z

Smoke Test: Services Connectivity

Redis PING: ❌ (name resolution failure: host.docker.internal)
PostgreSQL pg_isready: ❌ (no response, same DNS failure)
PostgreSQL SELECT 1: ❌ (could not translate host name)

Overall: FAIL — host.docker.internal could not be resolved from the AWF sandbox, blocking all connectivity checks.

🔌 Service connectivity validated by Smoke Services
_{Add label ready-for-aw to run again}

github-actions · 2026-09-03T00:04:20Z

Smoke Test: Copilot Engine — @lpcox

✅ GitHub MCP: PR test: validate shared-gateway enclave smoke #8026 test: validate shared-gateway enclave smoke, PR Mount the configured container working directory when no other mount exposes it #8021 Mount the configured container working directory when no other mount exposes it
✅ GitHub.com connectivity (HTTP 200)
✅ File write/read test

Overall: PASS

📰 BREAKING: Report filed by Smoke Copilot
_{Add label ready-for-aw to run again}

github-actions · 2026-09-03T00:04:46Z

Chroot Version Comparison Results

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.14	Python 3.12.14	✅ YES
Node.js	v24.19.0	v2.98.0	❌ NO
Go	go1.22.12	go1.22.12	✅ YES

Overall: FAILED — Node.js version mismatch between host and chroot environments (host: v24.19.0, chroot: v2.98.0). The smoke-chroot label was not applied since not all tests passed.

Tested by Smoke Chroot
_{Add label ready-for-aw to run again}

github-actions · 2026-09-03T00:05:09Z

Docker Sbx Smoke Test

✅ GitHub MCP connectivity (PR test: validate shared-gateway enclave smoke #8026, Mount the configured container working directory when no other mount exposes it #8021 fetched)
✅ GitHub.com connectivity (HTTP 200)
✅ File write/read test verified

Overall: PASS

cc @lpcox (author)

📰 BREAKING: Report filed by Smoke Docker Sbx
_{Add label ready-for-aw to run again}

github-actions · 2026-09-03T00:05:41Z

PR titles:

Fix Copilot proxy auth and GHEC model discovery
test: organize Cloud Hypervisor manager tests by feature

GitHub merged PR review: ✅
safeinputs-gh query: ❌ (safeinputs-gh missing)
Playwright title: ✅
File write/readback: ✅
Discussion step: ❌ (discussion comments disabled)
Build AWF: ✅
Overall: FAIL

Warning

Firewall blocked 7 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
msfeed25.pkgs.visualstudio.com
www.google.com
www.gstatic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "msfeed25.pkgs.visualstudio.com"
    - "www.google.com"
    - "www.gstatic.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex
_{Add label ready-for-aw to run again}

github-actions · 2026-09-03T00:05:46Z

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A (ran, output correct)	✅ PASS
.NET	json-parse	✅	N/A (ran, output correct)	✅ PASS
Go	color	✅	1/1 passed	✅ PASS
Go	env	✅	1/1 passed	✅ PASS
Go	uuid	✅	1/1 passed	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	passed	✅ PASS
Node.js	execa	✅	passed	✅ PASS
Node.js	p-limit	✅	passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — PASS

Notes:

Java: Maven's default ~/.m2 directory was root-owned and not writable by the runner user, so -Dmaven.repo.local was pointed at a writable temp directory as a local workaround; the proxy settings from ~/.m2/settings.xml were still applied via JAVA_TOOL_OPTIONS/proxy config and all builds/tests succeeded through the firewall proxy.
No clone failures across any of the 8 test repositories.

Generated by Build Test Suite for #8038 · copilot · auto · 31.1 AIC · ⊞ 12K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-09-03T00:06:34Z

GitHub MCP Testing (#8026, #8021): ❌ (got #8038, #8025)
GitHub.com Connectivity: ✅
File I/O Test: ✅
BYOK Inference Test: ✅

Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw)

FAIL

cc @lpcox @Copilot

🔑 BYOK (AOAI api-key) report filed by Smoke Copilot BYOK AOAI (api-key)
_{Add label ready-for-aw to run again}

github-actions · 2026-09-03T00:06:38Z

Smoke Test: API Proxy OTel Tracing — Results

✅ Scenario 1 (Module Loading): otel.js loads successfully; isEnabled() returns true; exports include startRequestSpan, setTokenAttributes, setBudgetAttributes, endSpan, endSpanError, shutdown, isEnabled, plus OTLP exporter/fan-out internals.
✅ Scenario 2 (Test Suite): 3 suites / 68 tests passed (otel.test.js, otel-fanout.test.js, otel-workload-identity.test.js).
✅ Scenario 3 (Env Var Forwarding): env-passthrough.ts forwards GITHUB_AW_OTEL_TRACE_ID and GITHUB_AW_OTEL_PARENT_SPAN_ID to the agent; api-proxy-env-config.ts forwards GH_AW_OTLP_ENDPOINTS, OTEL_EXPORTER_OTLP_ENDPOINT, and both trace-context vars to the api-proxy sidecar.
✅ Scenario 4 (Token Tracker Integration): token-tracker-http.js implements the onUsage callback hook used by OTEL to set gen_ai.usage.* span attributes.
⚠️ Scenario 5 (OTEL Diagnostics): No api-proxy-specific otel.jsonl/token-usage.jsonl was found under /tmp/gh-aw/sandbox/firewall/logs/api-proxy/ (api-proxy sidecar wasn't invoked for real LLM traffic in this smoke run). The workflow-level /tmp/gh-aw/otel.jsonl does contain an exported gh-aw.agent.setup span, confirming OTLP export plumbing works end-to-end through Squid. This is expected — the smoke test validates code paths/config rather than exercising live agent LLM calls.

Overall: PASS — all implemented scenarios succeeded; Scenario 5's absence of api-proxy-specific spans is expected given no live proxied LLM request occurred in this run.

📡 OTel tracing validated by Smoke OTel Tracing
_{Add label ready-for-aw to run again}

github-actions · 2026-09-03T00:07:01Z

GitHub MCP connectivity: ✅
GitHub.com connectivity: ✅
File write/read test: ✅
BYOK inference test: ✅

Running in direct BYOK mode (AWF_AUTH_TYPE=github-oidc + AWF_AUTH_AZURE_* + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw) authenticated via Microsoft Entra

Overall status: PASS

/cc @Copilot @lpcox

🪪 BYOK (AOAI Entra) report filed by Smoke Copilot BYOK AOAI (Entra)
_{Add label ready-for-aw to run again}

…d GITHUB_COPILOT_INTEGRATION_ID fallback Corrects docs/auth-matrix.md and docs/environment.md to reflect PR #8038 (Fix Copilot proxy auth and GHEC model discovery, merged 2026-09-02): - COPILOT_GITHUB_TOKEN values starting with github_pat_ (fine-grained PATs) now always use the Bearer auth prefix on every Copilot target (github.com, GHEC, GHES, Business), overriding the previous target-based token/Bearer selection that still applies to classic PATs and OAuth tokens. - Copilot-Integration-Id now also falls back to GITHUB_COPILOT_INTEGRATION_ID when COPILOT_INTEGRATION_ID is unset. - Cross-referenced the stronger fine-grained-PAT guarantee from the existing Classic PAT + COPILOT_MODEL remediation guidance in docs/environment.md. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…d GITHUB_COPILOT_INTEGRATION_ID fallback (#8055) Corrects docs/auth-matrix.md and docs/environment.md to reflect PR #8038 (Fix Copilot proxy auth and GHEC model discovery, merged 2026-09-02): - COPILOT_GITHUB_TOKEN values starting with github_pat_ (fine-grained PATs) now always use the Bearer auth prefix on every Copilot target (github.com, GHEC, GHES, Business), overriding the previous target-based token/Bearer selection that still applies to classic PATs and OAuth tokens. - Copilot-Integration-Id now also falls back to GITHUB_COPILOT_INTEGRATION_ID when COPILOT_INTEGRATION_ID is unset. - Cross-referenced the stronger fine-grained-PAT guarantee from the existing Classic PAT + COPILOT_MODEL remediation guidance in docs/environment.md. Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Initial plan

741b8bb

Copilot AI assigned Copilot and lpcox Sep 2, 2026

Copilot started work on behalf of lpcox September 2, 2026 21:08 View session

Copilot AI linked an issue Sep 2, 2026 that may be closed by this pull request

Copilot proxy mishandles fine-grained PATs and legacy provider placeholders on GHEC data-residency endpoints #8035

Closed

fix: handle fine-grained Copilot PATs

9d4fb7b

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Fix Copilot proxy handling of fine-grained PATs and legacy provider placeholders~~ Fix Copilot proxy auth and GHEC model discovery Sep 2, 2026

Copilot AI requested a review from lpcox September 2, 2026 21:15

Copilot finished work on behalf of lpcox September 2, 2026 21:15

lpcox marked this pull request as ready for review September 2, 2026 21:55

Copilot AI balanced review requested due to automatic review settings September 2, 2026 21:55

Copilot started reviewing on behalf of lpcox September 2, 2026 21:55 View session

Copilot AI reviewed Sep 2, 2026

View reviewed changes

Copilot started work on behalf of lpcox September 2, 2026 22:00 View session

fix: address Copilot proxy review feedback

09159cf

Copilot finished work on behalf of lpcox September 2, 2026 22:05

lpcox added the ready-for-aw label Sep 2, 2026

github-actions Bot mentioned this pull request Sep 3, 2026

Surface AWF startup failures in firewall summaries #8023

Merged

github-actions Bot added the smoke-claude label Sep 3, 2026

github-actions Bot added the smoke-copilot-byok label Sep 3, 2026

github-actions Bot added the smoke-copilot-network-isolation Copilot network-isolation egress smoke test label Sep 3, 2026

github-actions Bot added the smoke-copilot label Sep 3, 2026

github-actions Bot added the smoke-docker-sbx label Sep 3, 2026

github-actions Bot added the build-test label Sep 3, 2026

github-actions Bot added the smoke-copilot-byok-aoai-apikey label Sep 3, 2026

lpcox temporarily deployed to aoai-model September 3, 2026 00:06 — with GitHub Actions Inactive

github-actions Bot added the smoke-copilot-byok-aoai-entra label Sep 3, 2026

lpcox temporarily deployed to aoai-model September 3, 2026 00:07 — with GitHub Actions Inactive

lpcox merged commit b7e426a into main Sep 3, 2026
178 of 182 checks passed

lpcox deleted the copilot/fix-copilot-proxy-regressions branch September 3, 2026 00:21

This was referenced Sep 3, 2026

[docs] auth: Document Copilot fine-grained PAT auth-prefix override and integration-ID fallback #8055

Merged

🩺 Runner Doctor UpdateRunner Doctor: 3 new self-hosted/GHEC failure-mode lessons (2026-09-01 scan) #8067

Closed

Copilot AI mentioned this pull request Sep 3, 2026

Update runner-doctor catalog with B29, B30, and C10 #8070

Merged

Uh oh!

Conversation

Copilot AI commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Suppressed comments (1)

Uh oh!

lpcox commented Sep 2, 2026

Uh oh!

Copilot AI commented Sep 2, 2026

Uh oh!

github-actions Bot commented Sep 2, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 3, 2026

Smoke Test: Claude Engine Validation

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Smoke Test: Services Connectivity

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Chroot Version Comparison Results

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

🏗️ Build Test Suite Results

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

github-actions Bot commented Sep 3, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Copilot AI commented Sep 2, 2026 •

edited

Loading

github-actions Bot commented Sep 3, 2026 •

edited

Loading

github-actions Bot commented Sep 3, 2026 •

edited

Loading

github-actions Bot commented Sep 3, 2026 •

edited

Loading

github-actions Bot commented Sep 3, 2026 •

edited

Loading

github-actions Bot commented Sep 3, 2026 •

edited

Loading

github-actions Bot commented Sep 3, 2026 •

edited

Loading

github-actions Bot commented Sep 3, 2026 •

edited

Loading

github-actions Bot commented Sep 3, 2026 •

edited

Loading

github-actions Bot commented Sep 3, 2026 •

edited

Loading

github-actions Bot commented Sep 3, 2026 •

edited

Loading