Issues · github/gh-aw-firewall · GitHub

Labels Milestones New issue

📊 Copilot Token Usage Report2026-04-08

token-usage-report

#1818

· github-actions opened

on Apr 8, 2026

[isolation] [PROCESS-ISOLATION] Same-UID /proc environ exposes token-bearing env metadata

isolation-testing

#1817

· github-actions opened

on Apr 8, 2026

[isolation] [ENV-ISOLATION] Same-UID /proc environ exposes token-bearing process environment metadata

isolation-testing

#1815

· github-actions opened

on Apr 8, 2026

fix: squid_https_latency benchmark always reports 0ms — AWF doesn't capture container stdout

#1814

· Mossaka opened

on Apr 8, 2026

gh-aw activation guard blocks Dependabot PRs with sender.type != 'Bot' condition

#1813

· Mossaka opened

on Apr 8, 2026

Add required secrets to Dependabot secrets store

#1812

· Mossaka opened

on Apr 8, 2026

[isolation] [PROC-ENV-ISOLATION] Same-UID process environments expose token-like variable metadata via /proc

isolation-testing

#1811

· github-actions opened

on Apr 8, 2026

[isolation] [PROC-ENV] Same-UID /proc environ reveals token-like env material across process boundary

isolation-testing

#1802

· github-actions opened

on Apr 8, 2026

[isolation] [PROCESS-ISOLATION] Same-UID /proc environ reveals inherited token-like env material

isolation-testing

#1800

· github-actions opened

on Apr 8, 2026

[aw] Issue Duplication Detector failed

agentic-workflows

#1798

· github-actions opened

on Apr 8, 2026

[isolation] [CONTAINER-METADATA] Host DMI identity metadata readable inside sandbox

isolation-testing

#1797

· github-actions opened

on Apr 8, 2026

[isolation] [PROCESS-ISOLATION] Same-UID /proc environ exposes AWF token metadata across process boundary

isolation-testing

#1794

· github-actions opened

on Apr 8, 2026