gh-aw-code-quality-audit: support raising GH issues in a given github repository instead of n the one where the GH workflow runs

[v1v]

What

support raising GH issues in a given github repository instead of n the one where the GH workflow runs

### Why

Help us centralsing the GH reporting in one single github repository.

[github-actions]

tl;dr: gh-aw-code-quality-audit currently cannot target a different repository for issue creation, and the right fix is to add an explicit target-issue-repository input (defaulting to ${{ github.repository }}) and wire it through both dedupe logic and safe-outputs.create-issue cross-repo settings.

Recommendation

Implement this as a scheduled-audit-level capability (not code-quality-audit only), then expose/override it in gh-aw-code-quality-audit. That keeps detector behavior consistent and avoids one-off divergence.

Findings

1. No target repository input exists today in the relevant workflow surfaces.

   • .github/workflows/gh-aw-code-quality-audit.md:24-63 defines inputs (model, additional-instructions, title-prefix, etc.) with no repo-target input.
   • .github/workflows/gh-aw-scheduled-audit.md:21-65 likewise defines no target-repo input.
   • gh-agent-workflows/scheduled-audit/README.md:34-43 documents inputs and also has no target-repo parameter.

2. Issue dedupe is hard-pinned to the workflow repository.

   • .github/workflows/gh-aw-scheduled-audit.md:96-102:

     gh issue list \
       --repo "$GITHUB_REPOSITORY" \
       --search "in:title \"$TITLE_PREFIX\""

   • .github/workflows/gh-aw-fragments/previous-findings.md:9-15 uses the same --repo "$GITHUB_REPOSITORY" pattern.

3. Current create-issue config has no cross-repo wiring in this workflow.

   • .github/workflows/gh-aw-code-quality-audit.md:82-90 defines safe-outputs.create-issue with max, title-prefix, close-older-key, close-older-issues, expires only.
   • Compiled output confirms no cross-repo/auth keys in handler config:
     • .github/workflows/gh-aw-code-quality-audit.lock.yml:2025 (GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG contains create_issue prefix/close/expires settings only).

4. Repository docs indicate schema support exists for cross-repo+auth, but it is not wired here.

   • docs/upgrading.md:28: “Missing cross-repo and auth properties restored to safe output schemas”.

Verification

I verified the current behavior with repository searches:

$ rg -n "GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG:.*create_issue" .github/workflows/gh-aw-code-quality-audit.lock.yml
.github/workflows/gh-aw-code-quality-audit.lock.yml:2025: GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"create_issue\":{\"close_older_issues\":false,\"close_older_key\":\"${{ inputs.title-prefix }}\",\"expires\":168,\"max\":1,\"title_prefix\":\"${{ inputs.title-prefix }} \"},...}"

$ rg -n "target-issue-number|target-repo|cross-repo" \
  .github/workflows/gh-aw-code-quality-audit.md \
  .github/workflows/gh-aw-scheduled-audit.md \
  .github/workflows/gh-aw-fragments/previous-findings.md
No matches found.

$ rg -n "allowedRepos|defaultTargetRepo|cross-repo|auth:" \
  .github/workflows docs gh-agent-workflows
docs/upgrading.md:28:- Missing `cross-repo` and `auth` properties restored to safe output schemas

Detailed Action Plan

1. Add workflow input for target repository

   • Update .github/workflows/gh-aw-scheduled-audit.md and .github/workflows/gh-aw-code-quality-audit.md workflow_call.inputs with:
     • target-issue-repository (string, default ${{ github.repository }}), validated as owner/repo.

2. Wire dedupe to selected target repo

   • In .github/workflows/gh-aw-scheduled-audit.md:89-102, replace --repo "$GITHUB_REPOSITORY" with the new input env var.
   • In .github/workflows/gh-aw-fragments/previous-findings.md:9-15, do the same so shared previous-findings behavior stays aligned.

3. Wire safe-output issue creation to selected repo

   • Update .github/workflows/gh-aw-code-quality-audit.md safe-outputs.create-issue block to include cross-repo targeting/auth fields supported by current gh-aw schema.
   • If shared behavior is preferred, apply equivalent wiring in .github/workflows/gh-aw-fragments/safe-output-scheduled-audit-issue.md so all scheduled-audit detectors inherit it.

4. Update docs/examples where users configure this

   • gh-agent-workflows/scheduled-audit/README.md (inputs table + example snippet).
   • gh-agent-workflows/scheduled-audit/example.yml (show optional override).
   • If code-quality-audit has consumer-facing docs later, document there too.

5. Compile and validate

   • Run make compile to regenerate lock files.
   • Confirm generated GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG includes the new create-issue repo-target/auth wiring.

Related Items

Type	Link	Relevance
Issue	#1708	Current request
File	.github/workflows/gh-aw-code-quality-audit.md	Workflow currently lacking target repo input/wiring
File	.github/workflows/gh-aw-scheduled-audit.md	Shared scheduled-audit input and dedupe behavior
File	.github/workflows/gh-aw-fragments/previous-findings.md	Previous-findings repo currently hardcoded
File	.github/workflows/gh-aw-fragments/safe-output-scheduled-audit-issue.md	Shared create-issue config surface
Doc	docs/upgrading.md	Evidence that cross-repo/auth schema properties exist
Related issue	#1701	Recent workflow capability extension pattern via new optional inputs

---

What is this? | From workflow: Trigger Issue Triage

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.