diff --git a/.github/workflows/msdo-issue-assistant.lock.yml b/.github/workflows/msdo-issue-assistant.lock.yml index 22c2888..0b2d69c 100644 --- a/.github/workflows/msdo-issue-assistant.lock.yml +++ b/.github/workflows/msdo-issue-assistant.lock.yml @@ -22,7 +22,7 @@ # For more information: https://github.github.com/gh-aw/introduction/overview/ # # -# frontmatter-hash: 4bf03e9e11bd04bb55e99ee33e0b0ce4c4adbb6c7f0056ec467744cfbeb23175 +# frontmatter-hash: 4328471ec936d196d8e3cd83c860cc670827d9b785cf7e2faac6827c1f4c9dd0 name: "MSDO Issue Triage Assistant" "on": @@ -181,17 +181,6 @@ jobs: run: /opt/gh-aw/actions/install_copilot_cli.sh 0.0.409 - name: Install awf binary run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.17.0 - - name: Validate lockdown mode requirements - id: validate-lockdown-requirements - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8 - env: - GITHUB_MCP_LOCKDOWN_EXPLICIT: "true" - GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }} - GH_AW_GITHUB_MCP_SERVER_TOKEN: ${{ secrets.GH_AW_GITHUB_MCP_SERVER_TOKEN }} - with: - script: | - const validateLockdownRequirements = require('/opt/gh-aw/actions/validate_lockdown_requirements.cjs'); - validateLockdownRequirements(core); - name: Download container images run: bash /opt/gh-aw/actions/download_docker_images.sh ghcr.io/github/gh-aw-firewall/agent:0.17.0 ghcr.io/github/gh-aw-firewall/squid:0.17.0 ghcr.io/github/gh-aw-mcpg:v0.1.4 ghcr.io/github/github-mcp-server:v0.30.3 node:lts-alpine - name: Write Safe Outputs Config @@ -452,7 +441,6 @@ jobs: "type": "stdio", "container": "ghcr.io/github/github-mcp-server:v0.30.3", "env": { - "GITHUB_LOCKDOWN_MODE": "1", "GITHUB_PERSONAL_ACCESS_TOKEN": "\${GITHUB_MCP_SERVER_TOKEN}", "GITHUB_READ_ONLY": "1", "GITHUB_TOOLSETS": "issues" diff --git a/.github/workflows/msdo-issue-assistant.md b/.github/workflows/msdo-issue-assistant.md index aa1adfa..33dc53f 100644 --- a/.github/workflows/msdo-issue-assistant.md +++ b/.github/workflows/msdo-issue-assistant.md @@ -22,7 +22,7 @@ network: tools: github: - lockdown: true + lockdown: false toolsets: [issues] fetch: allowed-domains: @@ -132,4 +132,4 @@ Keep responses: → Do not respond. No new technical information to act on. **Non-author comment on existing issue:** A third party comments "I have the same problem." -→ Do not respond. The commenter is not the issue author. \ No newline at end of file +→ Do not respond. The commenter is not the issue author.