[github-actions]

Documentation Updates - 2026-10-23

Document runner proxy inheritance and Grype scan-completion behavior from recent merges. Two existing reference pages updated; 10 lines added.

Features Documented

• Runner HTTP proxy forwarding, explicit gateway override precedence, internal exclusions, upstream readiness checks, and diagnostic redaction from Honor runner proxy settings in CLI proxy and MCP gateway containers #70347.
• Per-image Grype planned/completed/failed reporting, invalid-output handling, and strict/development compilation behavior from fix: reject incomplete Grype scans and verify per-image completion #71297.

Detailed Changes and Review Coverage

• Updated docs/src/content/docs/reference/self-hosted-runners.md with runner proxy configuration guidance.
• Updated docs/src/content/docs/setup/cli.md to distinguish successful zero-finding scans from incomplete coverage.
• Queried recent merged PRs (20-result preflight), commits since October 22, open documentation issues, documentation issues closed since October 16, and cookie-labeled documentation issues through GitHub MCP. The date-based scan includes some activity older than exactly 24 hours.
• Existing documentation covers custom ledger records (fix: enforce custom ledger record contract before queuing #71240), admission setup (Document admission setup and server-size AIC policies #71323), trusted bots (Cover trusted-bot policy compilation and document platform bot support #70343), routing aliases (Expand aliases in engine.model-routing.allowed-models #70942), and native Codex sub-agents (Codex: stage native TOML sub-agents with resolved models and fail closed before startup #70945). Internal refactors, dependency updates, and workflow-specific repairs did not require additions in this PR.
• Read steering issue [aw] Daily Documentation Updater: is missing required tools #71414 comments: no comments were returned.

Skipped Issues

• Add SOC-2 compliance patterns doc page #41746: already addressed by reference/compliance-patterns.md, linked from enterprise configuration.
• Provider-based authentication for Claude, Copilot, Codex. #16498: current authentication reference and CLI guidance explicitly describe unsupported Claude OAuth tokens and supported API-key/WIF alternatives; broader provider implementation is outside this documentation change.
• OWASP Agentic Top 10 compliance evaluation: gap analysis across gh-aw, firewall, and mcpg #28770: broad security evaluation and implementation proposals require a separate security review; no unsupported compliance claims added.
• [cli-consistency] CLI Consistency Issues - 2026-10-20 #70526: CLI reference already directs readers to subcommand help, satisfying the proposed alternative.
• [cli-consistency] CLI Consistency Issues - 2026-10-19 #70265: missing subcommands and flags are now documented; CLI API consistency changes are outside scope.
• [cli-consistency] CLI Consistency Issues - 2026-10-16 #69382: repository format, doctor directory behavior, and per-command options are documented; changes to CLI flags are outside scope.
• [cli-consistency] CLI Consistency Issues - 2026-10-15 #69044: health --logs-dir is already documented.
• [workflow-style] Normalize report formatting for non-compliant workflows #69360: workflow prompt-formatting changes are outside this content-reference update.
• Integrity policy withheld additional issue results and the detailed file response for fix: reject incomplete Grype scans and verify per-image completion #71297; coverage is limited to permitted evidence. No alternate GitHub transport was used to retrieve withheld items.

Validation and Notes

• git diff --check passed; only the two intended Markdown files were committed.
• make agent-report-progress was attempted once with temporary files under /tmp/gh-aw/agent. It stopped during build because the Go 1.27.3 toolchain download failed TLS certificate verification. Tests did not run; network and certificate protections were left unchanged.
• The requested .github/instructions/documentation.instructions.md does not exist; followed the current .github/skills/documentation/SKILL.md guidance.
• report_progress is unavailable and was reported with report_missing_tool; publication uses the configured create-pull-request safe output.
• Top-level README and docs index remain unchanged. No workflow execution was dispatched.
• AI dictionary alignment summary: no AI-coding terms introduced or revised; existing repository terminology retained; no terminology conflicts.

Next Actions

Review the two documentation additions and rerun the required validation gate when the Go toolchain is available.

Generated by 📝 Daily Documentation Updater · codex · gpt60 · ~269 AIC · ⌖ ~84 AIC · ⊞ 19.1K · ◷

• expires on Oct 24, 2026, 2:52 AM UTC-08:00

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.93.3