Skip to content

[awf-feature-surfacing] Sync checkout multi-mode guidance across frontmatter references #68861

Closed as not planned

Description

@github-actions

Overview

Runtime repository lists now require literal checkout.multi: true. The checkout guide explains this, but the generated full frontmatter reference still describes the former allowed-repos trigger and says ordinary repository expressions require an allowlist. That can lead authors to write workflows with the wrong checkout behavior.

Key issue and priority

  • P1 — Correct the contradictory reference: Regenerate docs/src/content/docs/reference/frontmatter-full.md from the current schema with make generate-schema-docs. Confirm it lists multi and states that allowed-repos alone does not activate list expansion; single-repository expressions need no allowlist or non-root path prefix.
  • P2 — Improve the compact syntax entry: Add repo, multi, allowed-repos, max-repos, and allow-private-repos to the checkout field summary in .github/aw/syntax-agentic.md, with a link to the full checkout guide and one short list example.
  • P2 — Prevent drift: Add a focused check that the generated frontmatter reference is current when schema descriptions change.
Evidence and current surfacing
  • pkg/parser/schemas/main_workflow_schema.json, checkoutConfig around line 16569, defines multi with default false and says list expansion requires multi: true. The schema SHA-256 at review was f86b3dd1f09aaa4af11c49b3c02b799d469fc13d356744221599f73991e42844.
  • Commits 7f886949 (Add allowlisted dynamic repository checkout lists #68593) and 5a79aa3 (Require explicit multi: true for multi-repository checkout #68816) introduced runtime lists and then explicit opt-in with single-repository validation.
  • docs/src/content/docs/reference/checkout.md lines 51-109 correctly documents both modes and gives a working multi: true example.
  • docs/src/content/docs/reference/frontmatter-full.md around lines 23677-23721 instead says a list is used when allowed-repos is set, and that expressions require allowed-repos except for ${{ github.repository }}. It has no multi entry in that checkout block.
  • .github/aw/syntax-agentic.md around lines 220-270 lists supported checkout fields, but omits the new runtime-list fields.

Next action

Update the generated and compact references together, then verify their single-versus-multi examples against the current compiler.

Generated by 🧭 Daily AWF Spec Compiler Surfacing Review · codex · gpt60 · 102.1 AIC · ⌖ 5.92 AIC · ⊞ 14.1K · ◷

  • expires on Oct 21, 2026, 2:29 PM UTC-08:00

Activity

  1. lpcox commented on Oct 15, 2026

    @lpcox
    Collaborator

    🔗 AWF tracking issue: github/gh-aw-firewall#10004

    Generated by Firewall Issue Dispatcher · copilot · auto · 17.9 AIC · ⊞ 9.3K · ◷

  2. github-actions commented on Oct 21, 2026

    @github-actions
    ContributorAuthor

    This issue was automatically closed because it expired on 2026-10-21T22:29:07.704Z.

    Closed by Workflow

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions