Implement automated remediation workflows by Copilot · Pull Request #6 · robgrame/Nimbus.BootCertWatcher

Copilot · 2025-11-07T06:01:25Z

Adds workflow automation for responding to device conditions and alerts per v1.2 roadmap.

Core Components

Data Models

RemediationWorkflow: workflow definition with triggers, actions, priority
WorkflowTrigger: conditions for execution (deployment state, cert expiration, fleet/manufacturer filters, alert text, device inactivity)
WorkflowAction: typed actions (LogEntry, UpdateDeviceTags, EmailNotification*, Webhook*)
WorkflowExecution: execution history with status and results

Engine & API

WorkflowEngine: evaluates triggers against device/report data, executes actions sequentially, persists results
RemediationWorkflowsController: REST endpoints for CRUD + execution history
EF Core migration: RemediationWorkflows, WorkflowExecutions tables with proper indexing

Web UI

List view with enable/disable status
Create form with trigger/action configuration
Details view with execution history

Example Workflow

// Trigger: devices with expiring certificates in production fleet
var trigger = new WorkflowTrigger
{
    CertificateExpiringWithinDays = 90,
    FleetIdMatches = "production"
};

// Action: tag device for review
var action = new WorkflowAction
{
    ActionType = WorkflowActionType.UpdateDeviceTags,
    ConfigurationJson = "{\"cert_review_required\":\"true\"}",
    Order = 1
};

Security

Sanitized user-provided values in logs to prevent log forging (cs/log-forging).

Testing

5 new unit tests covering trigger evaluation, action execution, workflow filtering. All 20 tests passing.

*Email and Webhook actions are placeholders for future implementation; engine supports extensibility.

Original prompt

This section details on the original issue you should resolve

<issue_title>Automated remediation workflows</issue_title>
<issue_description>Implement feature Automated remediation workflows as described in roadmap</issue_description>

Comments on the Issue (you are @copilot in this section)

Fixes Automated remediation workflows #5

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

Co-authored-by: robgrame <12012136+robgrame@users.noreply.github.com>

…nd UI Co-authored-by: robgrame <12012136+robgrame@users.noreply.github.com>

Co-authored-by: robgrame <12012136+robgrame@users.noreply.github.com>

Copilot

Pull Request Overview

This pull request implements the Automated Remediation Workflows feature for the Secure Boot Certificate Watcher project. It enables administrators to define and execute automated actions in response to specific device conditions and alerts.

Key Changes:

Introduces workflow engine with trigger evaluation and action execution
Adds database models and migrations for workflows and execution history
Implements REST API endpoints for workflow management
Creates web UI pages for workflow creation, listing, and details viewing

Reviewed Changes

Copilot reviewed 26 out of 28 changed files in this pull request and generated 14 comments.

Show a summary per file

File	Description
docs/AUTOMATED_REMEDIATION_WORKFLOWS.md	Comprehensive documentation for the new workflows feature
SecureBootWatcher.Shared/Models/RemediationWorkflow.cs	Shared data models for workflows, triggers, and actions
SecureBootWatcher.Shared/Models/WorkflowExecution.cs	Execution tracking model with status enum
SecureBootDashboard.Api/Data/RemediationWorkflowEntity.cs	Database entity for storing workflow configurations
SecureBootDashboard.Api/Data/WorkflowExecutionEntity.cs	Database entity for execution history
SecureBootDashboard.Api/Data/SecureBootDbContext.cs	DbContext updates with new DbSets and relationships
SecureBootDashboard.Api/Data/Migrations/*	EF Core migration files for database schema
SecureBootDashboard.Api/Services/WorkflowEngine.cs	Core workflow evaluation and execution engine
SecureBootDashboard.Api/Controllers/RemediationWorkflowsController.cs	REST API endpoints for workflow CRUD operations
SecureBootDashboard.Api/Program.cs	Service registration for WorkflowEngine
SecureBootDashboard.Web/Pages/Workflows/*	Razor pages for UI (List, Create, Details)
SecureBootDashboard.Web/Pages/Shared/_Layout.cshtml	Navigation menu update
SecureBootDashboard.Api.Tests/Services/WorkflowEngineTests.cs	Unit tests for workflow engine
SecureBootDashboard.Api.Tests/*.csproj	Added EF Core InMemory package for tests
README.md	Updated feature list and roadmap

Files not reviewed (1)

SecureBootDashboard.Api/Data/Migrations/20251107060811_AddRemediationWorkflows.Designer.cs: Language not supported

Copilot · 2025-11-07T12:43:03Z

+            _logger.LogInformation("Created workflow {WorkflowId} with name length {NameLength}", 
+                workflow.Id, workflow.Name.Length);


The log message 'with name length {NameLength}' is unclear and doesn't provide useful information. Consider logging the actual workflow name instead: _logger.LogInformation(\"Created workflow {WorkflowId} '{WorkflowName}'\", workflow.Id, workflow.Name);

Suggested change

_logger.LogInformation("Created workflow {WorkflowId} with name length {NameLength}",

workflow.Id, workflow.Name.Length);

_logger.LogInformation("Created workflow {WorkflowId} '{WorkflowName}'",

workflow.Id, workflow.Name);

Copilot · 2025-11-07T12:43:03Z

+            _logger.LogInformation("Updated workflow {WorkflowId} with name length {NameLength}", 
+                workflow.Id, workflow.Name.Length);


The log message 'with name length {NameLength}' is unclear and doesn't provide useful information. Consider logging the actual workflow name instead: _logger.LogInformation(\"Updated workflow {WorkflowId} '{WorkflowName}'\", workflow.Id, workflow.Name);

Suggested change

_logger.LogInformation("Updated workflow {WorkflowId} with name length {NameLength}",

workflow.Id, workflow.Name.Length);

_logger.LogInformation("Updated workflow {WorkflowId} '{WorkflowName}'",

workflow.Id, workflow.Name);

Copilot · 2025-11-07T12:43:03Z

+                foreach (var workflowEntity in workflows)
+                {
+                    var workflow = MapToWorkflow(workflowEntity);
+                    if (await EvaluateTriggerAsync(workflow.Trigger, device, report, cancellationToken))
+                    {
+                        _logger.LogInformation("Workflow {WorkflowId} ({WorkflowName}) triggered for device {DeviceId}",
+                            workflow.Id, workflow.Name, deviceId);
+
+                        var execution = await ExecuteWorkflowAsync(workflow, device, report, cancellationToken);
+                        executions.Add(execution);
+                    }
+                }


This foreach loop immediately maps its iteration variable to another variable - consider mapping the sequence explicitly using '.Select(...)'.

Copilot · 2025-11-07T12:43:04Z

+                if (!string.IsNullOrEmpty(trigger.DeploymentState))
+                {
+                    if (!string.Equals(report.DeploymentState, trigger.DeploymentState, StringComparison.OrdinalIgnoreCase))
+                    {
+                        return false;
+                    }


These 'if' statements can be combined.

Suggested change

if (!string.IsNullOrEmpty(trigger.DeploymentState))

{

if (!string.Equals(report.DeploymentState, trigger.DeploymentState, StringComparison.OrdinalIgnoreCase))

{

return false;

}

if (!string.IsNullOrEmpty(trigger.DeploymentState) &&

!string.Equals(report.DeploymentState, trigger.DeploymentState, StringComparison.OrdinalIgnoreCase))

{

return false;

Copilot · 2025-11-07T12:43:04Z

+                if (!string.IsNullOrEmpty(trigger.ManufacturerMatches))
+                {
+                    if (!string.Equals(device.Manufacturer, trigger.ManufacturerMatches, StringComparison.OrdinalIgnoreCase))
+                    {
+                        return false;
+                    }


These 'if' statements can be combined.

Suggested change

if (!string.IsNullOrEmpty(trigger.ManufacturerMatches))

{

if (!string.Equals(device.Manufacturer, trigger.ManufacturerMatches, StringComparison.OrdinalIgnoreCase))

{

return false;

}

if (!string.IsNullOrEmpty(trigger.ManufacturerMatches) &&

!string.Equals(device.Manufacturer, trigger.ManufacturerMatches, StringComparison.OrdinalIgnoreCase))

{

return false;

Copilot · 2025-11-07T12:43:05Z

+            catch (Exception ex)
+            {
+                _logger.LogError(ex, "Error executing action {ActionType}", action.ActionType);
+                result.Success = false;
+                result.Message = $"Action failed: {ex.Message}";
+            }


Generic catch clause.

Copilot · 2025-11-07T12:43:06Z

+            catch (Exception ex)
+            {
+                _logger.LogError(ex, "Error fetching workflows");
+            }


Generic catch clause.

Copilot · 2025-11-07T12:43:06Z

+            catch (Exception ex)
+            {
+                _logger.LogError(ex, "Error creating workflow");
+                ModelState.AddModelError(string.Empty, "An error occurred while creating the workflow");
+                return Page();
+            }


Generic catch clause.

Copilot · 2025-11-07T12:43:06Z

+            catch (Exception ex)
+            {
+                _logger.LogError(ex, "Error fetching workflow details for {WorkflowId}", id);
+            }


Generic catch clause.

Suggested change

catch (Exception ex)

{

_logger.LogError(ex, "Error fetching workflow details for {WorkflowId}", id);

}

catch (HttpRequestException ex)

{

_logger.LogError(ex, "HTTP error fetching workflow details for {WorkflowId}", id);

}

catch (System.Text.Json.JsonException ex)

{

_logger.LogError(ex, "JSON error deserializing workflow details for {WorkflowId}", id);

}

Copilot · 2025-11-07T12:43:06Z

+            catch (Exception ex)
+            {
+                _logger.LogError(ex, "Error deleting workflow {WorkflowId}", id);
+            }


Generic catch clause.

robgrame · 2025-11-07T12:45:58Z

Review and fix conflicts

Copilot

Pull Request Overview

Copilot reviewed 26 out of 28 changed files in this pull request and generated 12 comments.

Files not reviewed (1)

SecureBootDashboard.Api/Data/Migrations/20251107060811_AddRemediationWorkflows.Designer.cs: Language not supported

Copilot · 2025-11-07T12:52:02Z

+                    CertificateExpiringWithinDays
+                };
+
+                var actionTypeEnum = Enum.Parse<WorkflowActionType>(ActionType);


Enum.Parse<WorkflowActionType>(ActionType) can throw ArgumentException if the ActionType string doesn't match any enum value. This should be validated or use Enum.TryParse to prevent unhandled exceptions. Consider adding validation or catching this specific exception type.

Suggested change

var actionTypeEnum = Enum.Parse<WorkflowActionType>(ActionType);

if (!Enum.TryParse<WorkflowActionType>(ActionType, out var actionTypeEnum))

{

ModelState.AddModelError(nameof(ActionType), "Invalid action type specified.");

return Page();

}

Copilot · 2025-11-07T12:52:02Z

+        public string ActionType { get; set; } = "LogEntry";
+
+        [BindProperty]
+        public string ActionConfiguration { get; set; } = "{\"message\": \"Workflow triggered\"}";


The ActionConfiguration property is not validated as JSON before submission. If users enter invalid JSON, it will cause errors during workflow execution. Consider adding client-side or server-side JSON validation to provide immediate feedback.

Copilot · 2025-11-07T12:52:02Z

+        function confirmDelete(id, name) {
+            if (confirm(`Are you sure you want to delete workflow "${name}"?`)) {


The workflow name is directly embedded into JavaScript string using @workflow.Name which can cause XSS vulnerabilities if the name contains quotes or special characters. Consider using Html.JavaScriptStringEncode or passing the data through a data attribute instead.

Copilot · 2025-11-07T12:52:03Z

+                var device = await _dbContext.Devices
+                    .Include(d => d.Reports.OrderByDescending(r => r.CreatedAtUtc).Take(1))
+                    .FirstOrDefaultAsync(d => d.Id == deviceId, cancellationToken);
+
+                if (device == null)
+                {
+                    _logger.LogWarning("Device {DeviceId} not found for workflow evaluation", deviceId);
+                    return executions;
+                }
+
+                var report = device.Reports.FirstOrDefault();
+                if (report == null)
+                {
+                    _logger.LogWarning("No reports found for device {DeviceId}", deviceId);
+                    return executions;
+                }


The method loads the device with only the latest report using Include(d => d.Reports.OrderByDescending(...).Take(1)), but then uses the specific reportId parameter elsewhere. This creates an inconsistency - the method should either load the specific report by ID, or not accept a reportId parameter at all if it always uses the latest report.

Copilot · 2025-11-07T12:52:03Z

+            var config = JsonSerializer.Deserialize<Dictionary<string, string>>(action.ConfigurationJson);
+            if (config == null) return;
+
+            var existingTags = string.IsNullOrEmpty(device.TagsJson)
+                ? new Dictionary<string, string>()
+                : JsonSerializer.Deserialize<Dictionary<string, string>>(device.TagsJson) ?? new Dictionary<string, string>();


JSON deserialization failures are silently handled with null returns. If the ConfigurationJson or TagsJson contains invalid JSON, the deserialization will throw an exception that isn't caught here, potentially causing action execution to fail. Consider wrapping deserialization in try-catch or validating JSON format beforehand.

Copilot · 2025-11-07T12:52:04Z

+                    if (trigger.HasExpiredCertificates.HasValue && trigger.HasExpiredCertificates.Value)
+                    {
+                        if (certificates?.ExpiredCertificateCount == 0)
+                        {
+                            return false;
+                        }


These 'if' statements can be combined.

Suggested change

if (trigger.HasExpiredCertificates.HasValue && trigger.HasExpiredCertificates.Value)

{

if (certificates?.ExpiredCertificateCount == 0)

{

return false;

}

if (trigger.HasExpiredCertificates.HasValue && trigger.HasExpiredCertificates.Value && certificates?.ExpiredCertificateCount == 0)

{

return false;

Copilot · 2025-11-07T12:52:04Z

+            catch (Exception ex)
+            {
+                _logger.LogError(ex, "Error evaluating trigger for workflow");
+                return false;
+            }


Generic catch clause.

Copilot · 2025-11-07T12:52:04Z

+            catch (Exception ex)
+            {
+                _logger.LogError(ex, "Error executing action {ActionType}", action.ActionType);
+                result.Success = false;
+                result.Message = $"Action failed: {ex.Message}";
+            }


Generic catch clause.

Suggested change

catch (Exception ex)

{

_logger.LogError(ex, "Error executing action {ActionType}", action.ActionType);

result.Success = false;

result.Message = $"Action failed: {ex.Message}";

}

catch (JsonException ex)

{

_logger.LogError(ex, "JSON error executing action {ActionType}", action.ActionType);

result.Success = false;

result.Message = $"JSON error: {ex.Message}";

}

catch (DbUpdateException ex)

{

_logger.LogError(ex, "Database update error executing action {ActionType}", action.ActionType);

result.Success = false;

result.Message = $"Database error: {ex.Message}";

}

catch (InvalidOperationException ex)

{

_logger.LogError(ex, "Invalid operation executing action {ActionType}", action.ActionType);

result.Success = false;

result.Message = $"Invalid operation: {ex.Message}";

}

catch (Exception ex) when (!(ex is OutOfMemoryException) && !(ex is StackOverflowException) && !(ex is ThreadAbortException))

{

_logger.LogError(ex, "Unexpected error executing action {ActionType}", action.ActionType);

result.Success = false;

result.Message = $"Unexpected error: {ex.Message}";

}

Copilot · 2025-11-07T12:52:05Z

+            catch (Exception ex)
+            {
+                _logger.LogError(ex, "Error creating workflow");
+                ModelState.AddModelError(string.Empty, "An error occurred while creating the workflow");


Generic catch clause.

Suggested change

catch (Exception ex)

{

_logger.LogError(ex, "Error creating workflow");

ModelState.AddModelError(string.Empty, "An error occurred while creating the workflow");

catch (HttpRequestException ex)

{

_logger.LogError(ex, "HTTP request error while creating workflow");

ModelState.AddModelError(string.Empty, "A network error occurred while creating the workflow");

return Page();

}

catch (JsonException ex)

{

_logger.LogError(ex, "JSON serialization error while creating workflow");

ModelState.AddModelError(string.Empty, "A data processing error occurred while creating the workflow");

return Page();

}

catch (ArgumentException ex)

{

_logger.LogError(ex, "Invalid argument while creating workflow");

ModelState.AddModelError(string.Empty, "Invalid input provided for workflow creation");

return Page();

}

// Catch any other unexpected exceptions to prevent unhandled errors from leaking to the user.

catch (Exception ex)

{

_logger.LogError(ex, "Unexpected error creating workflow");

ModelState.AddModelError(string.Empty, "An unexpected error occurred while creating the workflow");

Copilot · 2025-11-07T12:52:05Z

+            catch (Exception ex)
+            {
+                _logger.LogError(ex, "Error deleting workflow {WorkflowId}", id);
+            }


Generic catch clause.

Suggested change

catch (Exception ex)

{

_logger.LogError(ex, "Error deleting workflow {WorkflowId}", id);

}

catch (HttpRequestException ex)

{

_logger.LogError(ex, "HTTP error deleting workflow {WorkflowId}", id);

}

catch (TaskCanceledException ex)

{

_logger.LogError(ex, "Request timed out deleting workflow {WorkflowId}", id);

}

catch (Exception ex) when (!(ex is OutOfMemoryException) && !(ex is StackOverflowException) && !(ex is ThreadAbortException))

{

_logger.LogError(ex, "Unexpected error deleting workflow {WorkflowId}", id);

}

Copilot

Pull Request Overview

Copilot reviewed 26 out of 28 changed files in this pull request and generated 4 comments.

Files not reviewed (1)

SecureBootDashboard.Api/Data/Migrations/20251107060811_AddRemediationWorkflows.Designer.cs: Language not supported

Copilot · 2025-11-07T12:57:00Z

+            <nav aria-label="breadcrumb">
+                <ol class="breadcrumb">
+                    <li class="breadcrumb-item"><a asp-page="./List">Workflows</a></li>
+                    <li class="breadcrumb-item active" aria-current="page">@(Model.Workflow?.Name ?? "Unknown Workflow")</li>


[nitpick] Corrected spelling of 'Unknown Workflow' to maintain consistency with the error message on line 24, which uses 'Workflow not found.' Consider using 'Workflow Not Found' for consistency.

Suggested change

<li class="breadcrumb-item active" aria-current="page">@(Model.Workflow?.Name ?? "Unknown Workflow")</li>

<li class="breadcrumb-item active" aria-current="page">@(Model.Workflow?.Name ?? "Workflow Not Found")</li>

Copilot · 2025-11-07T12:57:00Z

+                }
+            }
+            catch (Exception ex)
+            {


Generic catch clause.

Suggested change

{

{

// Rethrow critical exceptions

if (ex is OutOfMemoryException ||

ex is StackOverflowException ||

ex is ThreadAbortException)

{

throw;

}

Copilot · 2025-11-07T12:57:01Z

+            catch (Exception ex)
+            {
+                _logger.LogError(ex, "Error creating workflow");
+                ModelState.AddModelError(string.Empty, "An error occurred while creating the workflow");
+                return Page();
+            }
+        }


Generic catch clause.

Suggested change

catch (Exception ex)

{

_logger.LogError(ex, "Error creating workflow");

ModelState.AddModelError(string.Empty, "An error occurred while creating the workflow");

return Page();

}

}

catch (HttpRequestException ex)

{

_logger.LogError(ex, "HTTP error creating workflow");

ModelState.AddModelError(string.Empty, "A network error occurred while creating the workflow");

return Page();

}

catch (JsonException ex)

{

_logger.LogError(ex, "JSON error creating workflow");

ModelState.AddModelError(string.Empty, "A data error occurred while creating the workflow");

return Page();

}

catch (ArgumentException ex)

{

_logger.LogError(ex, "Invalid argument creating workflow");

ModelState.AddModelError(string.Empty, "Invalid input provided for workflow creation");

return Page();

}

Copilot · 2025-11-07T12:57:01Z

+                    Executions = executions ?? new List<ExecutionHistory>();
+                }
+            }
+            catch (Exception ex)


Generic catch clause.

Suggested change

catch (Exception ex)

catch (Exception ex) when (ex is not OperationCanceledException)

Initial plan

065f66e

Copilot AI assigned Copilot and robgrame Nov 7, 2025

Copilot started work on behalf of robgrame November 7, 2025 06:01 View session

Copilot AI and others added 5 commits November 7, 2025 06:06

Initial plan for automated remediation workflows feature

4490246

Co-authored-by: robgrame <12012136+robgrame@users.noreply.github.com>

Add core automated remediation workflows feature

0cc4470

Co-authored-by: robgrame <12012136+robgrame@users.noreply.github.com>

Complete automated remediation workflows feature with documentation a…

6425748

…nd UI Co-authored-by: robgrame <12012136+robgrame@users.noreply.github.com>

Address code review feedback - fix type safety and delete handler

7091485

Co-authored-by: robgrame <12012136+robgrame@users.noreply.github.com>

Fix security vulnerabilities - sanitize log entries

f4d7957

Co-authored-by: robgrame <12012136+robgrame@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Add automated remediation workflows feature~~ Implement automated remediation workflows Nov 7, 2025

Copilot AI requested a review from robgrame November 7, 2025 06:33

Copilot finished work on behalf of robgrame November 7, 2025 06:33

robgrame approved these changes Nov 7, 2025

View reviewed changes

robgrame marked this pull request as ready for review November 7, 2025 12:38

robgrame requested a review from Copilot November 7, 2025 12:38

Copilot AI reviewed Nov 7, 2025

View reviewed changes

robgrame removed their assignment Nov 7, 2025

robgrame requested a review from Copilot November 7, 2025 12:46

Copilot AI reviewed Nov 7, 2025

View reviewed changes

robgrame approved these changes Nov 7, 2025

View reviewed changes

robgrame requested a review from Copilot November 7, 2025 12:52

Copilot AI reviewed Nov 7, 2025

View reviewed changes

		_logger.LogInformation("Created workflow {WorkflowId} with name length {NameLength}",
		workflow.Id, workflow.Name.Length);

		_logger.LogInformation("Updated workflow {WorkflowId} with name length {NameLength}",
		workflow.Id, workflow.Name.Length);

-            catch (Exception ex)
-            {
-                _logger.LogError(ex, "Error fetching workflow details for {WorkflowId}", id);
-            }
+            catch (HttpRequestException ex)
+            {
+                _logger.LogError(ex, "HTTP error fetching workflow details for {WorkflowId}", id);
+            }
+            catch (System.Text.Json.JsonException ex)
+            {
+                _logger.LogError(ex, "JSON error deserializing workflow details for {WorkflowId}", id);
+            }

		function confirmDelete(id, name) {
		if (confirm(`Are you sure you want to delete workflow "${name}"?`)) {

-            catch (Exception ex)
-            {
-                _logger.LogError(ex, "Error executing action {ActionType}", action.ActionType);
-                result.Success = false;
-                result.Message = $"Action failed: {ex.Message}";
-            }
+            catch (JsonException ex)
+            {
+                _logger.LogError(ex, "JSON error executing action {ActionType}", action.ActionType);
+                result.Success = false;
+                result.Message = $"JSON error: {ex.Message}";
+            }
+            catch (DbUpdateException ex)
+            {
+                _logger.LogError(ex, "Database update error executing action {ActionType}", action.ActionType);
+                result.Success = false;
+                result.Message = $"Database error: {ex.Message}";
+            }
+            catch (InvalidOperationException ex)
+            {
+                _logger.LogError(ex, "Invalid operation executing action {ActionType}", action.ActionType);
+                result.Success = false;
+                result.Message = $"Invalid operation: {ex.Message}";
+            }
+            catch (Exception ex) when (!(ex is OutOfMemoryException) && !(ex is StackOverflowException) && !(ex is ThreadAbortException))
+            {
+                _logger.LogError(ex, "Unexpected error executing action {ActionType}", action.ActionType);
+                result.Success = false;
+                result.Message = $"Unexpected error: {ex.Message}";
+            }

-            catch (Exception ex)
-            {
-                _logger.LogError(ex, "Error creating workflow");
-                ModelState.AddModelError(string.Empty, "An error occurred while creating the workflow");
+            catch (HttpRequestException ex)
+            {
+                _logger.LogError(ex, "HTTP request error while creating workflow");
+                ModelState.AddModelError(string.Empty, "A network error occurred while creating the workflow");
+                return Page();
+            }
+            catch (JsonException ex)
+            {
+                _logger.LogError(ex, "JSON serialization error while creating workflow");
+                ModelState.AddModelError(string.Empty, "A data processing error occurred while creating the workflow");
+                return Page();
+            }
+            catch (ArgumentException ex)
+            {
+                _logger.LogError(ex, "Invalid argument while creating workflow");
+                ModelState.AddModelError(string.Empty, "Invalid input provided for workflow creation");
+                return Page();
+            }
+            // Catch any other unexpected exceptions to prevent unhandled errors from leaking to the user.
+            catch (Exception ex)
+            {
+                _logger.LogError(ex, "Unexpected error creating workflow");
+                ModelState.AddModelError(string.Empty, "An unexpected error occurred while creating the workflow");

	<li class="breadcrumb-item active" aria-current="page">@(Model.Workflow?.Name ?? "Unknown Workflow")</li>
	<li class="breadcrumb-item active" aria-current="page">@(Model.Workflow?.Name ?? "Workflow Not Found")</li>

-            {
+            {
+                // Rethrow critical exceptions
+                if (ex is OutOfMemoryException ||
+                    ex is StackOverflowException ||
+                    ex is ThreadAbortException)
+                {
+                    throw;
+                }

	catch (Exception ex)
	catch (Exception ex) when (ex is not OperationCanceledException)

Conversation

Copilot AI commented Nov 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Core Components

Example Workflow

Security

Testing

Comments on the Issue (you are @copilot in this section)

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Reviewed Changes

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

robgrame commented Nov 7, 2025

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 7, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI commented Nov 7, 2025 •

edited

Loading