Skip to content

Use cached logs for daily firewall reporting - #53024

Merged
pelikhan merged 2 commits into
mainfrom
copilot/aw-daily-firewall-logs-fix
Aug 16, 2026
Merged

Use cached logs for daily firewall reporting#53024
pelikhan merged 2 commits into
mainfrom
copilot/aw-daily-firewall-logs-fix

Conversation

Copilot AI commented Aug 16, 2026

Copy link
Copy Markdown
Contributor

The daily firewall report launched an audit for every discovered run, leaving 207 audits in progress when the Copilot engine terminated.

  • Cached log collection

    • Import the shared 24-hour agentic workflow log fetcher.
    • Use precomputed run_summary.json firewall analysis.
  • Bounded report generation

    • Remove per-run logs, audit, and audit-diff calls.
    • Aggregate reports and charts directly from cached summaries.
    • Skip malformed summaries and avoid inferring unavailable policy attribution.
    • Align report language with the shared 24-hour collection window.
{
  "logs_dir": "/tmp/gh-aw/aw-mcp/logs"
}

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot AI changed the title [WIP] Fix daily firewall logs collector and reporter failure Use cached logs for daily firewall reporting Aug 16, 2026
Copilot AI requested a review from pelikhan August 16, 2026 03:43
@pelikhan
pelikhan marked this pull request as ready for review August 16, 2026 03:51
Copilot AI balanced review requested due to automatic review settings August 16, 2026 03:51
@pelikhan
pelikhan merged commit 955e58a into main Aug 16, 2026
1 check passed
@pelikhan
pelikhan deleted the copilot/aw-daily-firewall-logs-fix branch August 16, 2026 03:51

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Reworks daily firewall reporting to use cached 24-hour summaries, avoiding costly per-run audits.

Changes:

  • Imports shared log prefetching.
  • Aggregates and charts cached firewall summaries.
  • Regenerates the compiled workflow.
Show a summary per file
File Description
.github/workflows/daily-firewall-report.md Defines cached-summary reporting.
.github/workflows/daily-firewall-report.lock.yml Compiles the updated workflow.

Review details

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

  • Files reviewed: 2/2 changed files
  • Comments generated: 2
  • Review effort level: Balanced

Comment on lines +290 to 292
2. Select summaries with non-null `firewall_analysis`, skip malformed summaries, and aggregate:
- total requests, allowed requests, blocked requests
- blocked domain frequencies
- "*"
edit:
imports:
- shared/aw-logs-24h-fetch.md
@github-actions

Copy link
Copy Markdown
Contributor

🎉 This pull request is included in a new release.

Release: v0.87.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[aw] Daily Firewall Logs Collector and Reporter failed

3 participants