Reduce Smoke Codex first-request prompt surface by enabling GitHub gh-proxy mode#36828
Merged
Merged
Conversation
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot
AI
changed the title
[WIP] Set tools.github.mode to gh-proxy on smoke-codex.md
Reduce Smoke Codex first-request prompt surface by enabling GitHub gh-proxy mode
Jun 4, 2026
Collaborator
|
@copilot merge main and recompile |
Contributor
There was a problem hiding this comment.
Pull request overview
This PR aims to reduce the first-request prompt surface area for the Smoke Codex workflow by explicitly enabling tools.github.mode: gh-proxy, and includes a broad set of regenerated *.lock.yml workflows that now pin certain container images by digest.
Changes:
- Set
tools.github.mode: gh-proxyin.github/workflows/smoke-codex.md. - Regenerated many workflow lockfiles, updating
gh-aw-manifestmetadata anddownload_docker_images.sharguments to use digest-pinned images forgh-aw-mcpgand (where present)github-mcp-server.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/smoke-codex.md | Explicitly sets tools.github.mode: gh-proxy for Smoke Codex. |
| .github/workflows/workflow-skill-extractor.lock.yml | Regenerated lockfile; pins gh-aw-mcpg/github-mcp-server images by digest and updates download step. |
| .github/workflows/weekly-editors-health-check.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/video-analyzer.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/update-astro.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/test-workflow.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/test-dispatcher.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/smoke-workflow-call.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/smoke-temporary-id.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/smoke-service-ports.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/smoke-opencode.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/smoke-crush.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/smoke-copilot-sdk.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/smoke-ci.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/smoke-agent-public-none.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/smoke-agent-public-approved.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/smoke-agent-all-none.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/smoke-agent-all-merged.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/research.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/repo-tree-map.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/pr-nitpick-reviewer.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/pr-description-caveman.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/pr-code-quality-reviewer.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/issue-triage-agent.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/github-remote-mcp-auth-test.lock.yml | Regenerated lockfile; digest-pins gh-aw-mcpg image and updates download step. |
| .github/workflows/github-mcp-tools-report.lock.yml | Regenerated lockfile; digest-pins gh-aw-mcpg image and updates download step. |
| .github/workflows/firewall.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/example-permissions-warning.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/docs-noob-tester.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/designer-drift-audit.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/dependabot-go-checker.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/dependabot-burner.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/daily-team-evolution-insights.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/daily-syntax-error-quality.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/daily-skill-optimizer.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/daily-sentrux-report.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/daily-regulatory.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/daily-malicious-code-scan.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/daily-byok-ollama-test.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/copilot-pr-merged-report.lock.yml | Regenerated lockfile; digest-pins gh-aw-mcpg image and updates download step. |
| .github/workflows/codex-github-remote-mcp-test.lock.yml | Regenerated lockfile; digest-pins gh-aw-mcpg image and updates download step. |
| .github/workflows/bot-detection.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/blog-auditor.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/agentic-token-optimizer.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
| .github/workflows/ace-editor.lock.yml | Regenerated lockfile; digest-pins MCP-related images and updates download step. |
Copilot's findings
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 175/241 changed files
- Comments generated: 1
Comment on lines
39
to
46
| @@ -41,6 +41,7 @@ tools: | |||
| cache-memory: true | |||
| comment-memory: true | |||
| github: | |||
| mode: gh-proxy | |||
| playwright: | |||
| mode: cli | |||
…xt-daily-optimizer-again # Conflicts: # .github/workflows/daily-cache-strategy-analyzer.lock.yml # .github/workflows/daily-fact.lock.yml # .github/workflows/daily-observability-report.lock.yml # .github/workflows/dev.lock.yml # .github/workflows/duplicate-code-detector.lock.yml # .github/workflows/grumpy-reviewer.lock.yml # .github/workflows/issue-arborist.lock.yml # .github/workflows/necromancer.lock.yml # .github/workflows/schema-feature-coverage.lock.yml # .github/workflows/smoke-call-workflow.lock.yml # .github/workflows/smoke-codex.lock.yml Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Contributor
Author
Done in |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The ambient context analysis identified prompt bloat in
Smoke Codex, with the<mcp-clis>block far larger than peer workflows. This change applies the highest-leverage recommendation by switching GitHub tooling togh-proxy, reducing always-injected CLI context.What changed
tools.github.mode: gh-proxyto.github/workflows/smoke-codex.md..github/workflows/smoke-codex.lock.ymlto reflect the new tool injection path and metadata hashes.Why this matters
smoke-codex.Smoke Codexwith the leaner GitHub MCP CLI injection pattern already used elsewhere.Config delta (source workflow)