Avoid Copilot CLI startup crashes in Breaking Change Checker

[Copilot]

Breaking Change Checker intermittently failed before agent execution because the Copilot CLI’s bundled Node.js runtime can abort during startup under gVisor.

Changes

• Replace the affected workflow’s gVisor runtime with docker-sbx.
• Regenerate the compiled workflow with the docker-sbx setup and routing configuration.

sandbox:
  agent:
    runtime: docker-sbx

[github-actions]

Category: bug | Risk: medium | Score: 42/100 (impact 24/50, urgency 10/30, quality 8/20)
Recommended action: defer
Note: Drafted startup-crash fix with no visible file changes yet; lower urgency.

Generated by 🔧 PR Triage Agent · copilot · mai10 · 16.9 AIC · ⌖ 2.56 AIC · ⊞ 16.1K · ◷

[github-actions]

Category: bug | Risk: medium | Score: 51 | Action: defer | Batch: awf-runtime

Note: Important runtime change, but draft and still immature.

Generated by 🔧 PR Triage Agent · copilot · mai10 · 24.3 AIC · ⌖ 2.54 AIC · ⊞ 16.1K · ◷

[github-actions]

Category: bug | Risk: medium | Score: 54 (impact 27 + urgency 15 + quality 12) | Action: batch_review | CI: unknown | Batch: workflow-reliability

Draft workflow-runtime fix; review alongside similar reliability changes.

Generated by 🔧 PR Triage Agent · copilot · mai10 · 21.1 AIC · ⌖ 2.54 AIC · ⊞ 16.1K · ◷

[github-actions]

Category: bug | Risk: medium | Score: 57 (impact 34 + urgency 14 + quality 9) | Action: fast_track | Batch: none

Generated by 🔧 PR Triage Agent · copilot · mai10 · 22.2 AIC · ⌖ 2.85 AIC · ⊞ 15.1K · ◷

[github-actions]

Category: bug | Risk: medium | Score: 57 (impact 34 + urgency 14 + quality 9) | Action: fast_track | Batch: none

Generated by 🔧 PR Triage Agent · copilot · mai10 · 22.2 AIC · ⌖ 2.85 AIC · ⊞ 15.1K · ◷

[github-actions]

Category: bug | Risk: medium | Score: 56 (impact 28 urgency 18 quality 10) | Action: batch_review | Batch: workflow-reliability

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by 🔧 PR Triage Agent · copilot · mai10 · 25.2 AIC · ⌖ 2.93 AIC · ⊞ 15.1K · ◷

[github-actions]

Category: bug | Risk: medium | Score: 60 | Breakdown: impact 34/urgency 16/quality 10 | Action: defer | Batch: awf-runtime

Generated by 🔧 PR Triage Agent · copilot · mai10 · 24 AIC · ⌖ 2.63 AIC · ⊞ 15.1K · ◷