Make digest image validation internals private

[Copilot]

isDigestPinnedImageReference was exported from image-resolver despite having no external consumers, unnecessarily widening the module API. The related digest-pinned image regex constant was similarly only used inside the defining file.

• Export surface

  • Removed public exports from isDigestPinnedImageReference and DIGEST_PINNED_IMAGE_PATTERN.
  • Kept both as private module internals used by manifest validation.

• Behavior

  • Preserved existing digest-pinned image validation through validateCustomImageManifest.

const DIGEST_PINNED_IMAGE_PATTERN =
  `^${REGISTRY}/${PATH_COMPONENT}(?:/${PATH_COMPONENT})*:${TAG}@${DIGEST}$`;

function isDigestPinnedImageReference(reference: string): boolean {
  if (/\s|\$|\{\{/.test(reference)) return false;
  return DIGEST_PINNED_IMAGE.test(reference);
}

• Fixes [Export Audit] isDigestPinnedImageReference - unused image validation export #7692

[Copilot]

Pull request overview

Narrows image-resolver’s public API while preserving image-manifest validation.

Changes:

• Makes the digest pattern and validation helper module-private.
• Retains validation through validateCustomImageManifest.

Show a summary per file

File	Description
src/image-resolver.ts	Removes unnecessary exports from internal validation utilities.

Review details

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

• Files reviewed: 1/1 changed files
• Comments generated: 0
• Review effort level: Balanced

[github-actions]

✅ Copilot review passed with no inline comments.

@copilot Add the ready-for-aw label to this PR to trigger agentic CI smoke tests.

[github-actions]

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	93.85%	93.87%	📈 +0.02%
Statements	92.73%	92.74%	➡️ +0.01%
Functions	93.16%	93.16%	➡️ +0.00%
Branches	86.11%	86.12%	📈 +0.01%

📁 Per-file Coverage Changes (1 files)

File	Lines (Before → After)	Statements (Before → After)
src/log-directory-setup.ts	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)

---

Coverage comparison generated by scripts/ci/compare-coverage.ts

[github-actions]

✅ Smoke Copilot BYOK completed. Copilot BYOK mode operational. 🔓

🔑 BYOK report filed by Smoke Copilot BYOK

[github-actions]

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

Warning

Firewall blocked 3 domains

The following domains were blocked by the firewall during workflow execution:

• msfeed2.pkgs.visualstudio.com
• msfeed25.pkgs.visualstudio.com
• registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "msfeed2.pkgs.visualstudio.com"
    - "msfeed25.pkgs.visualstudio.com"
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

📰 BREAKING: Report filed by Smoke Copilot

[github-actions]

✅ Smoke Claude passed

Generated by Smoke Claude for #7702

[github-actions]

❌ Smoke Copilot BYOK AOAI (api-key) reports failed. AOAI BYOK (api-key) mode investigation needed...

🔑 BYOK (AOAI api-key) report filed by Smoke Copilot BYOK AOAI (api-key)

[github-actions]

✅ Contribution Check completed successfully!

PR #7702 follows the contribution guidelines: the change is small and self-contained, fits src/, preserves behavior, and the PR description clearly states the intent and references the related issue. No missing tests or documentation updates are evident from the provided context, so no review comment was needed.

Generated by Contribution Check for #7702

[github-actions]

🔌 Smoke Services — All services reachable! ✅

🔌 Service connectivity validated by Smoke Services

[github-actions]

🛡️ Smoke Copilot Network Isolation confirmed the egress allowlist is enforced. ✅

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• example.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "example.com"

See Network Configuration for more information.

🛡️ Egress verdict from Smoke Copilot Network Isolation

[github-actions]

📡 Smoke OTel Tracing completed. All tracing scenarios validated. ✅

📡 OTel tracing validated by Smoke OTel Tracing

[github-actions]

✅ Build Test Suite completed successfully!

Generated by Build Test Suite for #7702

[github-actions]

❌ Smoke Gemini reports failed. Facets need polishing...

💎 Faceted by Smoke Gemini

[github-actions]

📰 VERDICT: Smoke Docker Sbx has concluded. All systems operational. This is a developing story. 🎤

📰 BREAKING: Report filed by Smoke Docker Sbx

[github-actions]

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

Tested by Smoke Chroot

[github-actions]

🚀 Security Guard has started processing this pull request

[github-actions]

✅ Smoke Copilot BYOK AOAI (Entra) completed. Copilot AOAI BYOK (Entra) mode operational. 🔓

🪪 BYOK (AOAI Entra) report filed by Smoke Copilot BYOK AOAI (Entra)

[github-actions]

Smoke Test: Copilot Engine — @lpcox

• ✅ GitHub MCP: PR Upgrade gh-aw workflows to latest pre-release #7695 "Upgrade gh-aw workflows to latest pre-release"
• ✅ GitHub.com connectivity: HTTP 200
• ✅ File write/read test: OK

Overall: PASS

📰 BREAKING: Report filed by Smoke Copilot
_{Add label ready-for-aw to run again}

[github-actions]

Copilot Network Isolation Smoke Test — @lpcox

EGRESS_RESULT allow=pass deny=pass

✅ Allowed domain (github.com) reachable: allowed=200
✅ Blocked domain (example.com) denied: CONNECT tunnel 403

Overall: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• example.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "example.com"

See Network Configuration for more information.

🛡️ Egress verdict from Smoke Copilot Network Isolation
_{Add label ready-for-aw to run again}

[github-actions]

Smoke Test: Claude Engine Validation

Check	Status
API	✅ PASS
gh CLI	✅ PASS
File access	✅ PASS

Overall result: PASS

Generated by Smoke Claude for #7702 · haiku45 · 32.6 AIC · ⊞ 4.5K · ◷
_{Add label ready-for-aw to run again}

[github-actions]

Smoke Test: Copilot BYOK (Direct) Mode — PASS

✅ GitHub MCP connectivity
✅ GitHub.com HTTP 200
✅ File write/read test
✅ BYOK inference (api-proxy → api.githubcopilot.com)

Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY) via api-proxy sidecar.

🔑 BYOK report filed by Smoke Copilot BYOK
_{Add label ready-for-aw to run again}

[github-actions]

Smoke Test: Services Connectivity

• Redis PING: ❌ (Temporary failure in name resolution)
• PostgreSQL pg_isready: ❌ (no response)
• PostgreSQL SELECT 1: ❌ (could not translate host name)

Overall: FAIL — host.docker.internal did not resolve from the sandbox; no service reachable.

🔌 Service connectivity validated by Smoke Services
_{Add label ready-for-aw to run again}

[github-actions]

Smoke Test: Docker Sbx Validation

• ✅ GitHub MCP connectivity (PRs Upgrade gh-aw workflows to latest pre-release #7695, fix: preserve agent startup with restricted tmp #7679 fetched)
• ✅ GitHub.com connectivity (HTTP 200)
• ✅ File write/read test

Overall: PASS

cc @lpcox

📰 BREAKING: Report filed by Smoke Docker Sbx
_{Add label ready-for-aw to run again}

[github-actions]

• Upgrade gh-aw workflows to latest pre-release
• fix: preserve agent startup with restricted tmp
• GitHub MCP: ❌
• Safeinputs GH CLI: ❌
• Playwright: ✅
• File/Bash: ✅
• Discussion: ❌
• Build AWF: ✅
• Overall: FAIL

Warning

Firewall blocked 3 domains

The following domains were blocked by the firewall during workflow execution:

• msfeed2.pkgs.visualstudio.com
• msfeed25.pkgs.visualstudio.com
• registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "msfeed2.pkgs.visualstudio.com"
    - "msfeed25.pkgs.visualstudio.com"
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex
_{Add label ready-for-aw to run again}

[github-actions]

📡 OTel Tracing Smoke Test Results

• ✅ Scenario 1 (Module Loading): otel.js loads successfully, isEnabled() → true. Exports: startRequestSpan, setTokenAttributes, setBudgetAttributes, endSpan, endSpanError, shutdown, isEnabled, _parseEndpoints, _parseOtlpHeaders, _buildResourceSpans, _createOtlpWorkloadIdentity, plus internal exporter classes.
• ✅ Scenario 2 (Test Suite): 68/68 tests passed across 3 suites (otel.test.js, otel-serialization/exporters split modules) — 0 failures.
• ✅ Scenario 3 (Env Var Forwarding): env-passthrough.ts forwards GITHUB_AW_OTEL_TRACE_ID/GITHUB_AW_OTEL_PARENT_SPAN_ID to the agent; api-proxy-env-config.ts forwards GH_AW_OTLP_ENDPOINTS, OTEL_EXPORTER_OTLP_ENDPOINT, and the trace context to api-proxy.
• ✅ Scenario 4 (Token Tracker Integration): onUsage callback confirmed present in token-tracker-http.js as the OTEL hook point.
• ✅ Scenario 5 (OTEL Diagnostics): Workflow-level /tmp/gh-aw/otel.jsonl shows an exported gh-aw.agent.setup span with correct trace/parent-span IDs; no api-proxy-specific otel.jsonl was produced since no LLM API calls were routed through the sidecar in this run (expected — no spans to export, graceful degradation confirmed by empty api-proxy-logs/).

Summary: all 5 scenarios pass. No regressions detected.

📡 OTel tracing validated by Smoke OTel Tracing
_{Add label ready-for-aw to run again}

[github-actions]

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A (run OK)	✅ PASS
.NET	json-parse	✅	N/A (run OK)	✅ PASS
Go	color	✅	ok	✅ PASS
Go	env	✅	ok	✅ PASS
Go	uuid	✅	ok	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	all passed	✅ PASS
Node.js	execa	✅	all passed	✅ PASS
Node.js	p-limit	✅	all passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

All 18 test projects across Bun, C++, Deno, .NET, Go, Java, Node.js, and Rust built/tested successfully through the AWF firewall (Java used a local Maven repo at /tmp due to a pre-existing ~/.m2 permission restriction on the runner, unrelated to the firewall).

Generated by Build Test Suite for #7702 · auto · 57.2 AIC · ⊞ 12K · ◷
_{Add label ready-for-aw to run again}

[github-actions]

Make digest image validation internals private
MCP connectivity: ❌
GitHub.com connectivity: ✅
File read/write: ✅
BYOK inference: ✅
Running in direct BYOK mode (AWF_AUTH_TYPE=github-oidc + AWF_AUTH_AZURE_* + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw) authenticated via Microsoft Entra
Overall status: FAIL
Author: @Copilot

🪪 BYOK (AOAI Entra) report filed by Smoke Copilot BYOK AOAI (Entra)
_{Add label ready-for-aw to run again}

[github-actions]

Chroot Version Comparison

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.14	Python 3.12.14	✅ YES
Node.js	v24.19.0	v2.97.0	❌ NO
Go	go1.22.12	go1.22.12	✅ YES

Result: Not all versions matched (Node.js mismatch) — smoke-chroot label not applied.

Tested by Smoke Chroot
_{Add label ready-for-aw to run again}