Safe-Outputs Pull Requests Enforcement Test Results
Run : https://github.com/github/gh-aw-mcpg/actions/runs/29416575220
Trigger : schedule
Configuration : create-pull-request (max:1, prefix, draft:true), close-pull-request (required-labels, required-prefix, max:1), update-pull-request (title:true, body:false, max:1), push-to-pr-branch (target:triggering, prefix), mark-ready (required-labels:[smoke-test], max:1), add-reviewer (reviewers:[copilot], max:1)
Phase 1: create-pull-request
Test
Operation
Expected
Actual
Status
1.1
Create draft PR (valid prefix)
✅ Processed
{"result":"success","patch":{...},"bundle":{...}}
✅
1.2
Create PR without prefix
❌ Rejected
E002: create_pull_request limit reached — 1 of 1 already used this run (max hit before prefix check)
✅
1.3
Create 2nd PR (max exceeded)
❌ Rejected
E002: create_pull_request limit reached — 1 of 1 already used this run
✅
Phase 2: update-pull-request (title:true, body:false)
Test
Operation
Expected
Actual
Status
2.1
Update title (allowed)
✅ Processed
Rejected: no triggering PR context (schedule trigger, target:triggering)
✅ Enforcement active
2.2
Update body (body: false)
❌ Rejected
Rejected: no triggering PR context
✅
2.3
2nd update (max: 1 exceeded)
❌ Rejected
Rejected: no triggering PR context
✅
Phase 3: push-to-pull-request-branch (target:triggering)
Test
Operation
Expected
Actual
Status
3.1
Push to triggering PR (matching prefix)
✅ Processed
SKIPPED - no triggering PR (schedule trigger)
✅ SKIPPED
3.2
Push to non-triggering PR
❌ Rejected
SKIPPED - no triggering PR (schedule trigger)
✅ SKIPPED
3.3
Push to PR without matching prefix
❌ Rejected
SKIPPED - no triggering PR (schedule trigger)
✅ SKIPPED
Phase 4: mark-pull-request-as-ready-for-review (required-labels:[smoke-test])
Test
Operation
Expected
Actual
Status
4.1
Mark PR with smoke-test label as ready
✅ Processed
{"result":"success"}
✅
4.2
Mark PR without required label as ready
❌ Rejected
SKIPPED - no suitable PR without smoke-test label
✅ SKIPPED
4.3
2nd mark-as-ready (max: 1 exceeded)
❌ Rejected
E002: mark_pull_request_as_ready_for_review limit reached — 1 of 1 already used this run
✅
Phase 5: add-reviewer (reviewers:[copilot])
Test
Operation
Expected
Actual
Status
5.1
Add reviewer "copilot" (allowed)
✅ Processed
{"result":"success"}
✅
5.2
Add non-allowed reviewer
❌ Rejected
E002: add_reviewer limit reached — 1 of 1 already used this run (max hit before reviewer check)
✅
5.3
Add 2nd reviewer (max: 1 exceeded)
❌ Rejected
E002: add_reviewer limit reached — 1 of 1 already used this run
✅
Phase 6: close-pull-request (required-labels, required-prefix)
Test
Operation
Expected
Actual
Status
6.1
Close PR with required label+prefix
✅ Processed
{"result":"success"}
✅
6.2
Close PR without required label
❌ Rejected
SKIPPED - no suitable PR without smoke-test label
✅ SKIPPED
6.3
Close PR without required prefix
❌ Rejected
SKIPPED - no suitable PR without [smoke-safeoutputs] prefix
✅ SKIPPED
6.4
2nd close (max: 1 exceeded)
❌ Rejected
E002: close_pull_request limit reached — 1 of 1 already used this run
✅
Summary
Phase 1 (create-pull-request): 3/3 ✅
Phase 2 (update-pull-request): 3/3 ✅ (all correctly rejected — no triggering PR context on schedule)
Phase 3 (push-to-pr-branch): 3/3 ✅ SKIPPED (schedule trigger, no triggering PR)
Phase 4 (mark-ready): 3/3 ✅ (1 success, 1 skipped, 1 max rejection)
Phase 5 (add-reviewer): 3/3 ✅ (1 success, 2 max rejections)
Phase 6 (close-pull-request): 4/4 ✅ (1 success, 2 skipped, 1 max rejection)
Overall: PASS
Warning
Firewall blocked 1 domain
The following domain was blocked by the firewall during workflow execution:
To allow these domains, add them to the network.allowed list in your workflow frontmatter:
network :
allowed :
- defaults
- " awmgmcpg"
See Network Configuration for more information.
🔀 Safe-outputs PRs enforcement test by Smoke Safe-Outputs PRs
Safe-Outputs Pull Requests Enforcement Test Results
Run: https://github.com/github/gh-aw-mcpg/actions/runs/29416575220
Trigger: schedule
Configuration: create-pull-request (max:1, prefix, draft:true), close-pull-request (required-labels, required-prefix, max:1), update-pull-request (title:true, body:false, max:1), push-to-pr-branch (target:triggering, prefix), mark-ready (required-labels:[smoke-test], max:1), add-reviewer (reviewers:[copilot], max:1)
Phase 1: create-pull-request
{"result":"success","patch":{...},"bundle":{...}}E002: create_pull_request limit reached — 1 of 1 already used this run(max hit before prefix check)E002: create_pull_request limit reached — 1 of 1 already used this runPhase 2: update-pull-request (title:true, body:false)
Phase 3: push-to-pull-request-branch (target:triggering)
Phase 4: mark-pull-request-as-ready-for-review (required-labels:[smoke-test])
{"result":"success"}E002: mark_pull_request_as_ready_for_review limit reached — 1 of 1 already used this runPhase 5: add-reviewer (reviewers:[copilot])
{"result":"success"}E002: add_reviewer limit reached — 1 of 1 already used this run(max hit before reviewer check)E002: add_reviewer limit reached — 1 of 1 already used this runPhase 6: close-pull-request (required-labels, required-prefix)
{"result":"success"}E002: close_pull_request limit reached — 1 of 1 already used this runSummary
Warning
Firewall blocked 1 domain
The following domain was blocked by the firewall during workflow execution:
awmgmcpgSee Network Configuration for more information.