π€ *Repo Assist here β I'm an automated AI assistant for this repository.* ## Activity for May 2026 ## Suggested Actions for Maintainer **Comprehensive list** of all pending actions requiring maintainer attention. * [ ] **Review PR** (branch `repo-assist/test-task9-list-commits-response-paths-2026-05-20`): `test(rust-guard): add list_commits tests for default-branch vs feature-branch integrity` β closes #6086 β [View branch](https://github.com/github/gh-aw-mcpg/compare/repo-assist/test-task9-list-commits-response-paths-2026-05-20) * [ ] **Review PR** (branch `repo-assist/eng-pin-container-yml-actions-2026-05-20`): `ci: pin container.yml actions to commit SHAs` β [View branch](https://github.com/github/gh-aw-mcpg/compare/repo-assist/eng-pin-container-yml-actions-2026-05-20) * [ ] **Review PR** #6050: Fix flaky `TestFetchAndFixSchema_NetworkError` β [Review](https://github.com/github/gh-aw-mcpg/pull/6050) * [ ] **Review PR** (branch `repo-assist/fix-issue-5997-hoist-invariant-loop-allocs`): `perf(rust-guard): hoist invariant integrity/secrecy calls outside per-item loops` β closes #5997 β [View branch](https://github.com/github/gh-aw-mcpg/compare/repo-assist/fix-issue-5997-hoist-invariant-loop-allocs) * [ ] **Review PR** (branch `repo-assist/eng-pin-github-script-2026-05-19`): `ci: pin actions/github-script to SHA and upgrade v7βv9.0.0` β [View branch](https://github.com/github/gh-aw-mcpg/compare/repo-assist/eng-pin-github-script-2026-05-19) ## Future Work for Repo Assist - wasm race fix (#5666), Cow/label_matches_normalized (#5739/#5074), per-tool jq filters (#5270), session timeout move (#5071), `os.Getenvβenvutil` (#5519) ## Guard Filtering Summary No objects were filtered by the guard policy. ## Run History ### 2026-05-20 13:39 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/26165758577) - π§ Created PR (branch `repo-assist/test-task9-list-commits-response-paths-2026-05-20`): `test(rust-guard): add list_commits tests for default/feature-branch integrity` β closes #6086 - π§ Created PR (branch `repo-assist/eng-pin-container-yml-actions-2026-05-20`): `ci: pin container.yml actions to commit SHAs` ### 2026-05-19 13:43 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/26101078502) - π§ Created PR (branch `repo-assist/fix-issue-5997-hoist-invariant-loop-allocs`): `perf(rust-guard): hoist invariant integrity/secrecy calls outside per-item loops` β closes #5997 - π§ Created PR (branch `repo-assist/eng-pin-github-script-2026-05-19`): `ci: pin actions/github-script to SHA and upgrade v7βv9.0.0` ### 2026-05-18 13:56 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/26037996208) - π§ Created PR (branch `repo-assist/eng-pin-github-script-ci-2026-05-18`): `ci: pin actions/github-script to SHA and upgrade v7βv9 in ci.yml` ### 2026-05-17 13:00 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/25991516406) - π§ Created PR #5880: `refactor(server): add legacyPolicySource constant` β closed by maintainer - π¬ Commented on #5866: addressed Pattern A; left Pattern B (symmetric log helpers) as-is - π¬ Commented on #5865: analysis of NewNoopGuard error-path vs intentional-noop sites ### 2026-05-16 12:59 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/25970041437) - π·οΈ Labelled #5810, #5803, #5777 with `needs triage` - π¬ Commented on #5799: verified `discussion_comment_write` guard gap ### 2026-05-15 13:15 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/25919732186) - π·οΈ Labelled #5741, #5735, #5718 with `automated smoke tests` - π§ Created PR #5750: `refactor(config): add envutil.HasEnvVar and hasMapKeyVariants helpers` β closes #5733 β **merged** > Generated by [Repo Assist](https://github.com/github/gh-aw-mcpg/actions/runs/26165758577/agentic_workflow) Β· β 2.6M Β· [β·](https://github.com/search?q=repo:github%2Fgh-aw-mcpg+is:issue+%22gh-aw-workflow-call-id:+github%2Fgh-aw-mcpg%2Frepo-assist%22&type=issues) > > To install this [agentic workflow](https://github.com/githubnext/agentics/blob/851905c06e905bf362a9f6cc54f912e3df747d55/workflows/repo-assist.md), run > ``` > gh aw add githubnext/agentics/workflows/repo-assist.md@851905c06e905bf362a9f6cc54f912e3df747d55 > ``` > Generated by [Repo Assist](https://github.com/github/gh-aw-mcpg/actions/runs/26165758577/agentic_workflow) Β· β 5.7M Β· [β·](https://github.com/search?q=repo%3Agithub%2Fgh-aw-mcpg+is%3Aissue+%22gh-aw-workflow-call-id%3A+github%2Fgh-aw-mcpg%2Frepo-assist%22&type=issues) > > To install this [agentic workflow](https://github.com/githubnext/agentics/blob/851905c06e905bf362a9f6cc54f912e3df747d55/workflows/repo-assist.md), run > ``` > gh aw add githubnext/agentics/workflows/repo-assist.md@851905c06e905bf362a9f6cc54f912e3df747d55 > ``` <!-- gh-aw-agentic-workflow: Repo Assist, engine: copilot, version: 1.0.40, model: claude-sonnet-4.6, id: 26165758577, workflow_id: repo-assist, run: https://github.com/github/gh-aw-mcpg/actions/runs/26165758577 -->
π€ Repo Assist here β I'm an automated AI assistant for this repository.
Activity for May 2026
Suggested Actions for Maintainer
Comprehensive list of all pending actions requiring maintainer attention.
repo-assist/test-task9-list-commits-response-paths-2026-05-20):test(rust-guard): add list_commits tests for default-branch vs feature-branch integrityβ closes [rust-guard] Rust Guard: extract_items_array should return Option<&'static str> for items path, not "" sentinelΒ #6086 β View branchrepo-assist/eng-pin-container-yml-actions-2026-05-20):ci: pin container.yml actions to commit SHAsβ View branchTestFetchAndFixSchema_NetworkErrorβ Reviewrepo-assist/fix-issue-5997-hoist-invariant-loop-allocs):perf(rust-guard): hoist invariant integrity/secrecy calls outside per-item loopsβ closes [rust-guard] Hoist invariant integrity/secrecy calls outside per-item loops in response_items.rsΒ #5997 β View branchrepo-assist/eng-pin-github-script-2026-05-19):ci: pin actions/github-script to SHA and upgrade v7βv9.0.0β View branchFuture Work for Repo Assist
policy_scope_tokenandintegrity_rank_normalizedhot pathsΒ #5739/[rust-guard] Rust Guard: Eliminate redundant Value clone in extract_mcp_response + PolicyScopeEntry clone in first_matching_scopeΒ #5074), per-tool jq filters ([gateway] Per-tool jq response filters to reduce token bloatΒ #5270), session timeout move ([duplicate-code] Duplicate Code Pattern: Session Timeout Env-Var LiteralΒ #5071),os.Getenvβenvutil([duplicate-code] Duplicate Code Pattern: Guard Policy Env Var Reading β Mixed os.Getenv vs envutilΒ #5519)Guard Filtering Summary
No objects were filtered by the guard policy.
Run History
2026-05-20 13:39 UTC β Run
repo-assist/test-task9-list-commits-response-paths-2026-05-20):test(rust-guard): add list_commits tests for default/feature-branch integrityβ closes [rust-guard] Rust Guard: extract_items_array should return Option<&'static str> for items path, not "" sentinelΒ #6086repo-assist/eng-pin-container-yml-actions-2026-05-20):ci: pin container.yml actions to commit SHAs2026-05-19 13:43 UTC β Run
repo-assist/fix-issue-5997-hoist-invariant-loop-allocs):perf(rust-guard): hoist invariant integrity/secrecy calls outside per-item loopsβ closes [rust-guard] Hoist invariant integrity/secrecy calls outside per-item loops in response_items.rsΒ #5997repo-assist/eng-pin-github-script-2026-05-19):ci: pin actions/github-script to SHA and upgrade v7βv9.0.02026-05-18 13:56 UTC β Run
repo-assist/eng-pin-github-script-ci-2026-05-18):ci: pin actions/github-script to SHA and upgrade v7βv9 in ci.yml2026-05-17 13:00 UTC β Run
refactor(server): add legacyPolicySource constantβ closed by maintainer2026-05-16 12:59 UTC β Run
needs triagediscussion_comment_writeguard gap2026-05-15 13:15 UTC β Run
automated smoke testsrefactor(config): add envutil.HasEnvVar and hasMapKeyVariants helpersβ closes [duplicate-code] Duplicate Code Pattern: Mixed env var access and dual-form key checks in guard_policy_parse.goΒ #5733 β merged