Run safe-outputs MCP in the gh-aw node container by Copilot · Pull Request #39100 · github/gh-aw

Copilot · 2026-06-13T15:42:29Z

This changes safe-outputs from a separately started HTTP sidecar into a first-class MCP server entry. The generated workflow now runs safe-outputs inside the gh-aw-node container with write access to the workspace, safe-outputs runtime files, and the safe-outputs log directory.

What changed
- Replaced the generated safe-outputs HTTP server config with a containerized stdio MCP server definition.
- Added a dedicated published container constant for ghcr.io/github/gh-aw-node.
- Mounted the required writable paths directly into the MCP server:
  - workspace
  - ${RUNNER_TEMP}/gh-aw/safeoutputs
  - /tmp/gh-aw/mcp-logs/safeoutputs
Workflow generation
- Removed the dedicated “generate safe-outputs server config” / “start safe-outputs HTTP server” flow.
- Kept safe-outputs runtime file generation (config.json, tools.json) but made those files inputs to the MCP container instead of a host-side server process.
- Dropped the now-unused safe-outputs port/API-key wiring from generated env and gateway setup.
MCP server model
- Safe-outputs is now emitted alongside the rest of the MCP server list instead of being bootstrapped out-of-band.
- The generated MCP entry passes through the runtime env needed by the JS implementation (workspace, runner temp, safe-outputs config/tools paths, log dir, repo context).

Generated shape

{
  "safeoutputs": {
    "container": "ghcr.io/github/gh-aw-node",
    "mounts": [
      "${GITHUB_WORKSPACE}:${GITHUB_WORKSPACE}:rw",
      "${RUNNER_TEMP}/gh-aw/safeoutputs:${RUNNER_TEMP}/gh-aw/safeoutputs:rw",
      "/tmp/gh-aw/mcp-logs/safeoutputs:/tmp/gh-aw/mcp-logs/safeoutputs:rw"
    ],
    "args": ["-w", "${GITHUB_WORKSPACE}"]
  }
}

Related updates
- Updated renderer and setup-generation expectations to reflect stdio container transport instead of HTTP transport.
- Refreshed the affected golden outputs and focused MCP/safe-outputs workflow expectations.

Changeset\n\n- Type: patch\n- Description: Run safe-outputs as a containerized MCP server inside the runtime instead of a separate HTTP sidecar.

Generated by 📋 Changeset Generator for issue #39100 · 13.6 AIC · ⊞ 14.8K · ◷

✨ PR Review Safe Output Test - Run 27471836462

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · 84.9 AIC · ⌖ 7.94 AIC · ⊞ 8.1K · ◷

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

github-actions · 2026-06-13T16:05:34Z

💫 TO BE CONTINUED... Smoke Claude failed to deliver outputs! Our hero faces unexpected challenges...

github-actions · 2026-06-13T16:05:36Z

🚀 Smoke Antigravity MISSION COMPLETE! Antigravity has spoken. ✨

github-actions · 2026-06-13T16:05:37Z

❌ Design Decision Gate 🏗️ failed to deliver outputs during design decision gate check.

github-actions · 2026-06-13T16:05:40Z

🧪 Test Quality Sentinel completed test quality analysis.

github-actions · 2026-06-13T16:05:40Z

🧠 Matt Pocock Skills Reviewer has completed the skills-based review. ✅

github-actions · 2026-06-13T16:05:40Z

✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready.

github-actions · 2026-06-13T16:05:42Z

⚠️ Smoke Gemini failed. Gemini encountered unexpected challenges...

github-actions · 2026-06-13T16:05:54Z

🚀 Smoke Pi MISSION COMPLETE! Pi delivered. 🥧

github-actions · 2026-06-13T16:06:08Z

🌑 The shadows whisper... Smoke Codex failed to deliver outputs. The oracle requires further meditation...

github-actions · 2026-06-13T16:06:25Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-13T16:06:30Z

📰 BREAKING: Smoke Copilot - AOAI (Entra) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-13T16:06:34Z

📰 BREAKING: Smoke Copilot - AOAI (apikey) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-13T16:09:28Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.54.0
jq	✅	1.7
yq	✅	4.53.3
curl	✅	8.5.0
gh	✅	2.93.0
node	✅	22.22.3
python3	✅	3.11.15 (PyPy 7.3.23)
go	✅	1.24.13
java	✅	21.0.11 (Temurin)
dotnet	✅	10.0.300

Result: 12/12 tools available ✅

Overall Status: PASS

🔧 Tool validation by Agent Container Smoke Test · 40.1 AIC · ⌖ 12.6 AIC · ⊞ 28.1K · ◷

github-actions · 2026-06-14T16:32:57Z

⚠️ Smoke Gemini failed. Gemini encountered unexpected challenges...

github-actions · 2026-06-14T16:32:58Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-06-14T16:32:59Z

❌ Tool validation failed! Agent Container Smoke Test detected missing tools: failed

github-actions · 2026-06-14T16:32:59Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-06-14T16:33:05Z

🚀 Smoke Antigravity MISSION COMPLETE! Antigravity has spoken. ✨

github-actions · 2026-06-14T16:33:22Z

🚀 Smoke Pi MISSION COMPLETE! Pi delivered. 🥧

github-actions · 2026-06-14T16:33:36Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-14T16:33:46Z

📰 BREAKING: Smoke Copilot - AOAI (Entra) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-14T16:33:50Z

📰 BREAKING: Smoke Copilot - AOAI (apikey) is now investigating this pull request. Sources say the story is developing...

pelikhan · 2026-06-14T16:38:34Z

@copilot merge main, recompile

Investigate https://github.com/github/gh-aw/actions/runs/27505145830/job/81294978998#step:27:1

…H, GITHUB_TOKEN to gateway step env for safeoutputs container Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-06-14T16:53:15Z

@copilot merge main, recompile

Investigate https://github.com/github/gh-aw/actions/runs/27505145830/job/81294978998#step:27:1

The CI failure was: Configuration validation failed: undefined environment variable referenced: GH_AW_SAFE_OUTPUTS_CONFIG_PATH (plus GH_AW_SAFE_OUTPUTS_TOOLS_PATH and GITHUB_TOKEN).

Root cause: collectMCPEnvironmentVariables only added GH_AW_SAFE_OUTPUTS to the gateway step env: block, but not GH_AW_SAFE_OUTPUTS_CONFIG_PATH or GH_AW_SAFE_OUTPUTS_TOOLS_PATH. The MCP gateway uses resolveEnvPlaceholders to expand ${VAR} references in the safeoutputs container env JSON — if those vars aren't in process.env, startup fails.

Fixed in the latest commit by adding all three to mcp_environment.go in the hasSafeOutputs block, and recompiled all 246 lock files. Also merged latest main (1 new commit).

Containerize safe-outputs MCP server

ddb10e7

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI assigned Copilot and pelikhan Jun 13, 2026

Copilot AI changed the title ~~Configure safe-outputs MCP in gh-aw node container~~ Run safe-outputs MCP in the gh-aw node container Jun 13, 2026

Copilot created this pull request from a session on behalf of pelikhan June 13, 2026 15:42 View session

Copilot AI requested a review from pelikhan June 13, 2026 15:42

Copilot finished work on behalf of pelikhan June 13, 2026 15:42

pelikhan marked this pull request as ready for review June 13, 2026 16:04

Copilot AI review requested due to automatic review settings June 13, 2026 16:04

pelikhan added the smoke label Jun 13, 2026

Copilot started reviewing on behalf of pelikhan June 13, 2026 16:04 View session

github-actions Bot temporarily deployed to aoai-model June 13, 2026 16:05 Inactive

github-actions Bot temporarily deployed to aoai-model June 13, 2026 16:06 Inactive

This was referenced Jun 13, 2026

[aw] Smoke Antigravity produced no safe outputs #39104

Closed

[aw] Smoke Pi produced no safe outputs #39105

Closed

[aw] Smoke Gemini failed #39106

Closed

Add changeset

0f12637

Copilot finished work on behalf of pelikhan June 14, 2026 16:13

pelikhan added smoke and removed smoke smoke-claude labels Jun 14, 2026

github-actions Bot temporarily deployed to aoai-model June 14, 2026 16:32 Inactive

github-actions Bot had a problem deploying to aoai-model June 14, 2026 16:34 Failure

This was referenced Jun 14, 2026

[aw] Agent Container Smoke Test failed #39251

Open

[aw] Smoke Copilot - AOAI (apikey) failed #39252

Open

[aw] Smoke Gemini failed #39253

Open

[aw] Smoke Pi produced no safe outputs #39254

Open

[aw] Smoke Antigravity produced no safe outputs #39255

Open

github-actions Bot deployed to aoai-model June 14, 2026 16:36 Active

This was referenced Jun 14, 2026

[aw] Smoke Copilot failed #39256

Open

[aw] Smoke Copilot - AOAI (Entra) failed #39257

Open

Copilot started work on behalf of pelikhan June 14, 2026 16:39 View session

This was referenced Jun 14, 2026

[aw] Smoke Codex produced no safe outputs #39258

Open

[aw] Smoke Claude produced no safe outputs #39259

Open

Fix: add GH_AW_SAFE_OUTPUTS_CONFIG_PATH, GH_AW_SAFE_OUTPUTS_TOOLS_PAT…

5094277

…H, GITHUB_TOKEN to gateway step env for safeoutputs container Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan June 14, 2026 16:53

Conversation

Copilot AI commented Jun 13, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changeset\n\n- Type: patch\n- Description: Run safe-outputs as a containerized MCP server inside the runtime instead of a separate HTTP sidecar.

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 13, 2026

Uh oh!

github-actions Bot commented Jun 13, 2026

Uh oh!

github-actions Bot commented Jun 13, 2026

Uh oh!

github-actions Bot commented Jun 13, 2026

Agent Container Tool Check

Uh oh!

github-actions Bot commented Jun 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 14, 2026

Uh oh!

github-actions Bot commented Jun 14, 2026

Uh oh!

github-actions Bot commented Jun 14, 2026

Uh oh!

pelikhan commented Jun 14, 2026

Uh oh!

Copilot AI commented Jun 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Jun 13, 2026 •

edited by github-actions Bot

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 13, 2026 •

edited

Loading

github-actions Bot commented Jun 14, 2026 •

edited

Loading

github-actions Bot commented Jun 14, 2026 •

edited

Loading

github-actions Bot commented Jun 14, 2026 •

edited

Loading

github-actions Bot commented Jun 14, 2026 •

edited

Loading

github-actions Bot commented Jun 14, 2026 •

edited

Loading

github-actions Bot commented Jun 14, 2026 •

edited

Loading