Add allowlisted dynamic repository checkout lists (#68593)

* Add allowlisted runtime repository checkout lists

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Enforce runtime checkout allowlists and report rejected repositories

Require allowed-repos for repository expressions, keep wildcards exclusive to scoped allowlists, and propagate hard checkout rejections into agent failure issues. Fail compilation instead of silently dropping invalid main or imported checkout configurations.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Report all runtime checkout preparation failures

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Block LFS endpoints from bypassing runtime checkout allowlists

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Verify dynamic checkout credentials and exempt workflow repository expression

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Block submodule allowlist bypass for all runtime checkout lists

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* docs(adr): add draft ADR-68593 for allowlisted runtime repository checkout lists

* Limit runtime repository checkout lists with max-repos

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Address runtime checkout review feedback

Restrict allowlist expression provenance, disable recursive submodule fetches, and wire safe-output manifests and effective checkout authentication with regression coverage.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Specify runtime checkout safe-output and formal contracts

Align safe-output requirements with trusted runtime policies, bounded preflight, job-local manifests, credential finalization, staged isolation, and failure reporting. Add an executable bounded TLA+ model with checker integration, negative controls, and reachability witnesses.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Require explicit private runtime checkout opt-in

Default runtime lists to public targets. Require literal per-entry allow-private-repos opt-in for private/internal targets on non-public hosts, preserve unconditional public-host isolation, and merge opt-ins conservatively. Update schema, failure reporting regressions, documentation, ADR, and bounded TLA+ contracts.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Update workflows and preserve setup-node v7.1.0

Run gh aw update and regenerate workflow locks with the local compiler. Resolve the maintenance secret-validation Node action through the shared pin resolver instead of a stale v4.1.0 literal, with a regression test preventing future regeneration downgrades.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Pin Vite to the 1ES-available 8.3.1 release

Use an exact Vite version with a verified 1ES tarball and executable CLI. Preserve canonical lockfile URLs, all other locked packages, and existing security overrides.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Pin Node types to the 1ES-available 26.6.3 release

Restore clean dependency installation with a verified Node 26 types tarball. Preserve other locked packages and canonical npm registry URLs.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: 4 people

.changeset/major-runtime-repository-checkout.md

@@ -43,21 +43,11 @@
       "version": "v7.0.1",
       "sha": "3d3c42e5aac5ba805825da76410c181273ba90b1"
     },
-    "actions/create-github-app-token@v3.2.0": {
-      "repo": "actions/create-github-app-token",
-      "version": "v3.2.0",
-      "sha": "bcd2ba49218906704ab6c1aa796996da409d3eb1"
-    },
     "actions/create-github-app-token@v3.3.0": {
       "repo": "actions/create-github-app-token",
       "version": "v3.3.0",
       "sha": "64ab729a6294000f5aa4a4bc0b73d1f32bc45510"
     },
-    "actions/download-artifact@v8.0.1": {
-      "repo": "actions/download-artifact",
-      "version": "v8.0.1",
-      "sha": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c"
-    },
     "actions/download-artifact@v8.0.2": {
       "repo": "actions/download-artifact",
       "version": "v8.0.2",
@@ -93,11 +83,6 @@
       "version": "v6.0.1",
       "sha": "de7274f081f381c8f8158605e0321c36c376e2e6"
     },
-    "actions/setup-node@v7.0.0": {
-      "repo": "actions/setup-node",
-      "version": "v7.0.0",
-      "sha": "820762786026740c76f36085b0efc47a31fe5020"
-    },
     "actions/setup-node@v7.1.0": {
       "repo": "actions/setup-node",
       "version": "v7.1.0",
@@ -108,11 +93,6 @@
       "version": "v7.0.0",
       "sha": "5fda3b95a4ea91299a34e894583c3862153e4b97"
     },
-    "actions/upload-artifact@v7.0.1": {
-      "repo": "actions/upload-artifact",
-      "version": "v7.0.1",
-      "sha": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"
-    },
     "actions/upload-artifact@v7.0.2": {
       "repo": "actions/upload-artifact",
       "version": "v7.0.2",
@@ -193,9 +173,9 @@
       "version": "v1",
       "sha": "5ac0f275b83d9d5a9342c6aae977ec32fa330daa"
     },
-    "super-linter/super-linter@v9": {
+    "super-linter/super-linter@v9.0.0": {
       "repo": "super-linter/super-linter",
-      "version": "v9",
+      "version": "v9.0.0",
       "sha": "2da136927bd4a73596db63044b504547c62cb854"
     }
   },
@@ -895,11 +875,6 @@
       "digest": "sha256:3d5dba0b0a139bbb11b5d5b8b44f277d2b18f69cf43090e3c283d750cf864baa",
       "pinned_image": "ghcr.io/github/gh-aw-firewall/squid:0.28.9@sha256:3d5dba0b0a139bbb11b5d5b8b44f277d2b18f69cf43090e3c283d750cf864baa"
     },
-    "ghcr.io/github/gh-aw-mcpg:v0.4.30": {
-      "image": "ghcr.io/github/gh-aw-mcpg:v0.4.30",
-      "digest": "sha256:ab5a436a1490438db473e4e3d4c973cb1d75e3cb233fb08b73d31b42d7d18fba",
-      "pinned_image": "ghcr.io/github/gh-aw-mcpg:v0.4.30@sha256:ab5a436a1490438db473e4e3d4c973cb1d75e3cb233fb08b73d31b42d7d18fba"
-    },
     "ghcr.io/github/gh-aw-mcpg:v0.4.31": {
       "image": "ghcr.io/github/gh-aw-mcpg:v0.4.31",
       "digest": "sha256:dbec0f2ddef6adf83b7764019323096e3e5cc0f3886255f6320555b7fe2a7caf",

.github/aw/actions-lock.json

@@ -98,7 +98,7 @@ steps:
       go-version-file: go.mod
       cache: true
   - name: Setup Node.js
-    uses: actions/setup-node@v7.0.0
+    uses: actions/setup-node@v7.1.0
     with:
       node-version: "24"
       cache: npm