Smoke AllowOnly: 24031917165

[github-actions]

AllowOnly Guard Smoke Test Results

Policy: repos=["github/gh-aw*"], min-integrity=approved
Run: https://github.com/github/gh-aw-mcpg/actions/runs/24031917165

In-Scope Access (github/gh-aw*)

Tool	Target	Result	Status
list_issues	gh-aw-mcpg	20 issues returned	✅
list_pull_requests	gh-aw-mcpg	3 PRs returned	✅
list_commits	gh-aw-mcpg	3 commits returned	✅
get_file_contents	gh-aw-mcpg	README.md content returned	✅
list_branches	gh-aw-mcpg	5 branches returned	✅
search_code	gh-aw-mcpg	3 results returned	✅
list_issues	gh-aw	empty (3 items integrity-filtered; access to repo allowed)	✅
get_file_contents	gh-aw	empty (1 item integrity-filtered; access to repo allowed)	✅

Out-of-Scope Access (octocat/Hello-World)

Tool	Result	Status
list_issues	empty (3 items blocked — integrity below approved)	✅
list_pull_requests	empty (3 items blocked — integrity below approved)	✅
list_commits	empty (3 items blocked — integrity below approved)	✅
get_file_contents	empty (1 item blocked — integrity below approved)	✅
search_code	empty (1 item blocked — integrity below approved)	✅

Global APIs

Tool	Result	Status
search_repositories	empty (3 items filtered — integrity below approved)	✅
search_users	N/A — tool not available in this MCP server	✅

Integrity Filtering

Observation	Status
gh-aw list_issues (perPage=3): all 3 items filtered (FIRST_TIME_CONTRIBUTOR / NONE authors below "approved")	✅
gh-aw-mcpg issues/PRs (perPage=20): data returned — all authors are OWNER/MEMBER/COLLABORATOR (approved)	✅
octocat/Hello-World: all content blocked — out-of-scope repo treated as sub-approved integrity	✅

Summary

• In-Scope Access: 8/8 ✅
• Out-of-Scope Blocked: 5/5 ✅
• Global APIs Blocked: 1/1 ✅ (search_users N/A)
• Integrity Filtering: ✅
• Overall: PASS

Note

🔒 Integrity filter blocked 17 items

The following items were blocked because they don't meet the GitHub integrity level.

• [testify-expert] Improve Test Quality: pkg/agentdrain/miner_test.go gh-aw#24868 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• [refactor] Reduce duplicate logic in role_checks.go via consolidation refactoring gh-aw#24865 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• [aw] Daily Fact About gh-aw failed gh-aw#24860 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• get_file_contents get_file_contents: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• Test Issue 1775448569 octocat/Hello-World#7456 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• 🚨 New article published 😫 octocat/Hello-World#7455 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• Test octocat/Hello-World#7454 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• octocat/Hello-World@7fd1a60 list_commits: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• octocat/Hello-World@7629413 list_commits: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• octocat/Hello-World@553c207 list_commits: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• search_code search_code: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• https://github.com/guardian/guardian.github.com search_repositories: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• https://github.com/oreoshake/guard-brakeman search_repositories: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• https://github.com/johnbintz/guard-rails search_repositories: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• #7461 list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• #7458 list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• ... and 1 more item

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

🛡️ AllowOnly guard smoke test by Smoke AllowOnly

• expires on Apr 6, 2026, 2:36 PM UTC

[github-actions]

This issue was automatically closed because it expired on 2026-04-06T14:36:45.876Z.

Closed by Workflow