[Repo Assist] Monthly Activity 2026-05

[github-actions]

🤖 Repo Assist here — I'm an automated AI assistant for this repository.

Activity for May 2026

Suggested Actions for Maintainer

• Review PR: [Repo Assist] refactor(config): extract detailForKeyword — eliminates duplicate guidance strings in formatErrorContext, closes [duplicate-code] Duplicate Code Pattern: Duplicated addDetail() calls in formatErrorContext #6782 — Review
• Review PR: [Repo Assist] refactor(guard): extract parseDIFCTagsFromAny helper — removes 4 duplicate tag-parsing blocks, closes [duplicate-code] Duplicate Code Pattern: DIFC Tag Parsing in wasm_parse.go #6514 — Review
• Check comment [duplicate-code] Duplicate Code Pattern: Duplicated addDetail() calls in formatErrorContext #6782: Repo Assist verified duplicate code and implemented fix — View
• Check comment [go-fan] Go Module Review: santhosh-tekuri/jsonschema/v5 #6523: Repo Assist triaged go-fan recommendations — formatErrorContext brittle matching + v6 upgrade are top priorities — View
• Check comment [guard-coverage] Guard coverage gap: 2 operations from github-mcp-server not fully covered #6382: Repo Assist confirmed guard coverage gaps and provided exact fix snippets — View
• Check comment [guard-coverage] Guard coverage gap: 1 operation from github-mcp-server not fully covered #6512: sub_issue_write already in READ_WRITE_OPERATIONS — issue can be closed — View

Future Work for Repo Assist

• per-tool jq filters ([gateway] Per-tool jq response filters to reduce token bloat #5270), session timeout ([duplicate-code] Duplicate Code Pattern: Session Timeout Env-Var Literal #5071)
• [go-fan] Go Module Review: santhosh-tekuri/jsonschema/v5 #6523: upgrade jsonschema/v5 → v6 (removes fixSchemaBytes), io.LimitReader guard in fetchAndFixSchema
• Address rust-guard [rust-guard] Rust Guard: Merge 12 identical repo-scoped write match arms in apply_tool_labels #6575 (merge 12 identical repo-scoped write arms)

Guard Filtering Summary

No objects were filtered by the guard policy.

Run History

2026-05-31 13:04 UTC — Run

• 🔧 Created PR: refactor(config): extract detailForKeyword — closes [duplicate-code] Duplicate Code Pattern: Duplicated addDetail() calls in formatErrorContext #6782
• 💬 Commented on [duplicate-code] Duplicate Code Pattern: Duplicated addDetail() calls in formatErrorContext #6782: verified duplicate code pattern, implemented fix

2026-05-30 13:00 UTC — Run

• 🔧 Created PR: refactor(guard): extract parseDIFCTagsFromAny helper — closes [duplicate-code] Duplicate Code Pattern: DIFC Tag Parsing in wasm_parse.go #6514
• 💬 Commented on [duplicate-code] Duplicate Code Pattern: DIFC Tag Parsing in wasm_parse.go #6514: PR created for duplicate DIFC tag parsing fix
• 💬 Commented on [go-fan] Go Module Review: santhosh-tekuri/jsonschema/v5 #6523: triaged go-fan recommendations, highlighted formatErrorContext + v6 upgrade as top priorities

2026-05-29 13:45 UTC — Run

• 🔧 Created PR: refactor: move TruncateSessionID from auth to strutil — addresses [refactor] Semantic function clustering: 2 near-duplicates and 1 misplaced utility found #6499 Priority 1
• 💬 Commented on [guard-coverage] Guard coverage gap: 1 operation from github-mcp-server not fully covered #6512: sub_issue_write already present in READ_WRITE_OPERATIONS — issue can be closed

2026-05-28 13:58 UTC — Run

• 🔧 Created PR: refactor: extract RecordSpanError helper — addresses [duplicate-code] Duplicate Code Pattern: RecordError + SetStatus Paired Span Error Recording #6616, fixes missing stack trace in rate-limit path

2026-05-27 13:50 UTC — Run

• 🔧 Created PR: refactor(rust-guard): merge identical security-alert match arms and add actions_get tests — closes [rust-guard] Rust Guard: Merge three identical security-alert match arms in apply_tool_labels #6524
• 💬 Commented on [rust-guard] Rust Guard: Merge three identical security-alert match arms in apply_tool_labels #6524: implemented both improvements (match arm merge + actions_get tests)

2026-05-26 13:39 UTC — Run

• 🏷️ Labelled Resurect max-calls #6520 with enhancement
• 💬 Commented on Resurect max-calls #6520: investigated max-calls / tool-call-limits status — feature absent from codebase, outlined implementation steps

2026-05-25 13:45 UTC — Run

• 🔧 Created branch repo-assist/fix-rust-guard-6458: refactor(rust-guard): use policy_integrity constants and add security-tool label tests — closes [rust-guard] Rust Guard: Replace magic integrity strings with constants + add security-tool label tests #6458 (3 new tests, all 435 Rust tests pass)

2026-05-24 13:00 UTC — Run

• 🔧 Created branch repo-assist/improve-extract-wasm-call-result: refactor(guard): extract decodeWasmCallResult and unmarshalWasmResponse helpers — closes [duplicate-code] Duplicate Code Pattern: tryCallWasmFunction Dual-Path Result Handling #6384, [duplicate-code] Duplicate Code Pattern: LabelResource/LabelResponse JSON Unmarshal Pattern #6385
• 💬 Commented on [guard-coverage] Guard coverage gap: 2 operations from github-mcp-server not fully covered #6382: confirmed guard DIFC labeling gaps and provided exact tool_rules.rs fix snippets

2026-05-23 13:00 UTC — Run

• 🔧 Created branch repo-assist/fix-tracing-service-name-env: fix(cmd): apply OTEL_SERVICE_NAME env var override to tracing config — 2 new tracing tests

2026-05-22 13:30 UTC — Run

• 🔧 Created branch repo-assist/test-graphql-helpers-6276: test(rust-guard): add GraphQL path and URL-parsing tests for helpers.rs — closes [rust-guard] Rust Guard: Add tests for GraphQL paths in extract_items_array and for extract_repo_from_github_url #6276 (14 new tests, all 427 pass)
• 💬 Commented on [duplicate-code] Duplicate Code Pattern: Repeated CLI Flag-Override Logic in root.go #6265: verified duplicate flag-override analysis; suggested applyFlagOrEnv helper
• 🏷️ Labelled [duplicate-code] Duplicate Code Pattern: Repeated CLI Flag-Override Logic in root.go #6265 with help wanted, refactor

2026-05-21 13:44 UTC — Run

• 🔧 Created branch repo-assist/fix-issue-6193-hoist-invariant-response-paths: perf(rust-guard): hoist invariant label calls and dedup PR number extraction — closes [rust-guard] Rust Guard: Hoist invariant label calls outside per-item loops in response_paths.rs #6193

2026-05-20 13:39 UTC — Run

• 🔧 Created branch repo-assist/test-task9-list-commits-response-paths-2026-05-20: test(rust-guard): add list_commits tests for default/feature-branch integrity — closes [rust-guard] Rust Guard: extract_items_array should return Option<&'static str> for items path, not "" sentinel #6086
• 🔧 Created branch repo-assist/eng-pin-container-yml-actions-2026-05-20: ci: pin container.yml actions to commit SHAs

2026-05-19 13:43 UTC — Run

• 🔧 Created branch repo-assist/fix-issue-5997-hoist-invariant-loop-allocs: perf(rust-guard): hoist invariant integrity/secrecy calls outside per-item loops — closes #5997
• 🔧 Created branch repo-assist/eng-pin-github-script-2026-05-19: ci: pin actions/github-script to SHA and upgrade v7→v9.0.0

2026-05-18 13:56 UTC — Run

• �� Created branch repo-assist/eng-pin-github-script-ci-2026-05-18: ci: pin actions/github-script to SHA and upgrade v7→v9 in ci.yml

2026-05-17 13:00 UTC — Run

• 🔧 Created PR [Repo Assist] refactor(server): add legacyPolicySource constant in guard_init.go #5880: refactor(server): add legacyPolicySource constant — closed by maintainer
• 💬 Commented on [duplicate-code] Duplicate Code Pattern: Repeated Legacy Fallback Returns in guard_init.go and Symmetric RPC Log Helpers #5866: addressed Pattern A; left Pattern B (symmetric log helpers) as-is
• 💬 Commented on [duplicate-code] Duplicate Code Pattern: Repeated NewNoopGuard() Fallback in guard_init.go #5865: analysis of NewNoopGuard error-path vs intentional-noop sites

2026-05-16 12:59 UTC — Run

• 🏷️ Labelled Smoke Test: Copilot - 25962252064 #5810, Smoke AllowOnly - Issue Group #5803, Smoke Copilot - Issue Group #5777 with needs triage
• 💬 Commented on [guard-coverage] Guard coverage gap: 1 write operation from github-mcp-server not classified #5799: verified discussion_comment_write guard gap

2026-05-15 13:15 UTC — Run

• 🏷️ Labelled Smoke Test: Copilot - 25919213415 #5741, Smoke AllowOnly - Issue Group #5735, Smoke Copilot - Issue Group #5718 with automated smoke tests
• 🔧 Created PR [Repo Assist] refactor(config): add envutil.HasEnvVar and hasMapKeyVariants helpers #5750: refactor(config): add envutil.HasEnvVar and hasMapKeyVariants helpers — closes #5733 — merged

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

• proxy.golang.org
• releaseassets.githubusercontent.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "proxy.golang.org"
    - "releaseassets.githubusercontent.com"

See Network Configuration for more information.

Generated by Repo Assist · sonnet46 4.6M · ◷

Add this agentic workflows to your repo

To install this agentic workflow, run

gh aw add githubnext/agentics/workflows/repo-assist.md@851905c06e905bf362a9f6cc54f912e3df747d55