GitHub Agentic Workflows tightens safe outputs and reproducibility

gh-aw v0.87.4 makes agentic workflow compilation, plugin provenance and credential handling more explicit.

Human reviewed · generated by codex/gpt-5.6-luna

Use your e-reader’s page or volume buttons, Page Up/Down, or ←/→ to move one screen at a time.

LISTEN TO THIS ARTICLE

Use your browser’s voice to hear this article read aloud.

Speed

Ready to listen.

Summary

gh-aw v0.87.4 makes compilation fail when safe-output step-output tokens cannot resolve, adds pinned Agent Plugins, and supports per-engine model overrides and custom providers. It also stops GH_TOKEN persisting in repo-memory clone .git/config and derives conclusion-job write permission from resolved safe-output configuration.

Why it matters

For agentic GitHub Actions, workflow compilation, extension provenance and credential handling become explicit parts of the build pipeline.

Gemini CLI nightly hardens macOS agent sandbox boundaries
syslog-ng 4.9 adds native HTTP statistics exporters
Cline 4.1.12 extends enterprise MCP controls across its agent stack

Sources

https://github.com/github/gh-aw/releases/tag/v0.87.4

Summary

Why it matters

Related coverage

Sources