From 2a2a8e0c6fcc5a9cfbdc0a031add16c68ac891a4 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 18 Sep 2025 06:58:36 +0000
Subject: [PATCH 1/2] Initial plan


From 6624cd0268b8e071bd8f0dded2f4c374342f5b45 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 18 Sep 2025 07:07:14 +0000
Subject: [PATCH 2/2] Update instructions.md: clarify defaults for
 timeout/max-turns/model and emphasize compile command

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
---
 .../github-agentic-workflows.instructions.md  | 86 +++++++++++++++++--
 pkg/cli/templates/instructions.md             | 13 +--
 .../test-ai-inference-github-models.lock.yml  |  1 +
 .../test-claude-add-issue-comment.lock.yml    |  1 +
 .../test-claude-add-issue-labels.lock.yml     |  1 +
 .../test-claude-cache-memory.lock.yml         |  1 +
 .../workflows/test-claude-command.lock.yml    |  1 +
 .../test-claude-create-issue.lock.yml         |  1 +
 ...reate-pull-request-review-comment.lock.yml |  1 +
 .../test-claude-create-pull-request.lock.yml  |  1 +
 ...eate-repository-security-advisory.lock.yml |  1 +
 .../test-claude-markitdown-mcp.lock.yml       |  1 +
 .../test-claude-max-patch-size.lock.yml       |  1 +
 pkg/cli/workflows/test-claude-mcp.lock.yml    |  1 +
 .../test-claude-missing-tool.lock.yml         |  1 +
 .../test-claude-patch-size-exceeded.lock.yml  |  1 +
 .../test-claude-push-to-pr-branch.lock.yml    |  1 +
 .../test-claude-update-issue.lock.yml         |  1 +
 .../test-codex-add-issue-comment.lock.yml     |  1 +
 .../test-codex-add-issue-labels.lock.yml      |  1 +
 pkg/cli/workflows/test-codex-command.lock.yml |  1 +
 .../workflows/test-codex-custom-env.lock.yml  |  1 +
 ...playwright-accessibility-contrast.lock.yml |  1 +
 23 files changed, 108 insertions(+), 12 deletions(-)

diff --git a/.github/instructions/github-agentic-workflows.instructions.md b/.github/instructions/github-agentic-workflows.instructions.md
index 190e0f92e31..5e9892873c2 100644
--- a/.github/instructions/github-agentic-workflows.instructions.md
+++ b/.github/instructions/github-agentic-workflows.instructions.md
@@ -49,7 +49,7 @@ The YAML frontmatter supports these fields:
   - Available permissions: `contents`, `issues`, `pull-requests`, `discussions`, `actions`, `checks`, `statuses`, `models`, `deployments`, `security-events`
 
 - **`runs-on:`** - Runner type (string, array, or object)
-- **`timeout_minutes:`** - Workflow timeout (integer)
+- **`timeout_minutes:`** - Workflow timeout (integer, has sensible default and can typically be omitted)
 - **`concurrency:`** - Concurrency control (string or object)
 - **`env:`** - Environment variables (object or string)
 - **`if:`** - Conditional execution expression (string)
@@ -66,10 +66,11 @@ The YAML frontmatter supports these fields:
     ```yaml
     engine:
       id: claude                        # Required: coding agent identifier (claude, codex, custom)
-      version: beta                     # Optional: version of the action
-      model: claude-3-5-sonnet-20241022 # Optional: LLM model to use
-      max-turns: 5                      # Optional: maximum chat iterations per run
+      version: beta                     # Optional: version of the action (has sensible default)
+      model: claude-3-5-sonnet-20241022 # Optional: LLM model to use (has sensible default)
+      max-turns: 5                      # Optional: maximum chat iterations per run (has sensible default)
     ```
+  - **Note**: The `version`, `model`, and `max-turns` fields have sensible defaults and can typically be omitted unless you need specific customization.
   - **Custom engine format** (⚠️ experimental):
     ```yaml
     engine:
@@ -377,15 +378,53 @@ Use GitHub Actions context expressions throughout the workflow content. **Note:
 
 All other expressions are dissallowed.
 
+### Sanitized Context Text (`needs.task.outputs.text`)
+
+**RECOMMENDED**: Use `${{ needs.task.outputs.text }}` instead of individual `github.event` fields for accessing issue/PR content.
+
+The `needs.task.outputs.text` value provides automatically sanitized content based on the triggering event:
+
+- **Issues**: `title + "\n\n" + body`
+- **Pull Requests**: `title + "\n\n" + body`  
+- **Issue Comments**: `comment.body`
+- **PR Review Comments**: `comment.body`
+- **PR Reviews**: `review.body`
+- **Other events**: Empty string
+
+**Security Benefits of Sanitized Context:**
+- **@mention neutralization**: Prevents unintended user notifications (converts `@user` to `` `@user` ``)
+- **Bot trigger protection**: Prevents accidental bot invocations (converts `fixes #123` to `` `fixes #123` ``)
+- **XML tag safety**: Converts XML tags to parentheses format to prevent injection
+- **URI filtering**: Only allows HTTPS URIs from trusted domains; others become "(redacted)"
+- **Content limits**: Automatically truncates excessive content (0.5MB max, 65k lines max)
+- **Control character removal**: Strips ANSI escape sequences and non-printable characters
+
+**Example Usage:**
+```markdown
+# RECOMMENDED: Use sanitized context text
+Analyze this content: "${{ needs.task.outputs.text }}"
+
+# Less secure alternative (use only when specific fields are needed)
+Issue number: ${{ github.event.issue.number }}
+Repository: ${{ github.repository }}
+```
+
+### Accessing Individual Context Fields
+
+While `needs.task.outputs.text` is recommended for content access, you can still use individual context fields for metadata:
+
 ### Security Validation
 
 Expression safety is automatically validated during compilation. If unauthorized expressions are found, compilation will fail with an error listing the prohibited expressions.
 
 ### Example Usage
 ```markdown
-# Valid expressions
+# Valid expressions - RECOMMENDED: Use sanitized context text for security
 Analyze issue #${{ github.event.issue.number }} in repository ${{ github.repository }}.
 
+The issue content is: "${{ needs.task.outputs.text }}"
+
+# Alternative approach using individual fields (less secure)
 The issue was created by ${{ github.actor }} with title: "${{ github.event.issue.title }}"
 
 Using output from previous task: "${{ needs.task.outputs.text }}"
@@ -873,17 +912,20 @@ Agentic workflows compile to GitHub Actions YAML:
 
 ## Best Practices
 
+**⚠️ IMPORTANT**: Run `gh aw compile` after every workflow change to generate the GitHub Actions YAML file.
+
 1. **Use descriptive workflow names** that clearly indicate purpose
 2. **Set appropriate timeouts** to prevent runaway costs
 3. **Include security notices** for workflows processing user content  
 4. **Use @include directives** for common patterns and security boilerplate
-5. **Test with `gh aw compile`** before committing (or `gh aw compile <workflow-id>` for specific workflows)
+5. **ALWAYS run `gh aw compile` after every change** to generate the GitHub Actions workflow (or `gh aw compile <workflow-id>` for specific workflows)
 6. **Review generated `.lock.yml`** files before deploying
 7. **Set `stop-after`** in the `on:` section for cost-sensitive workflows
 8. **Set `max-turns` in engine config** to limit chat iterations and prevent runaway loops
 9. **Use specific tool permissions** rather than broad access
 10. **Monitor costs with `gh aw logs`** to track AI model usage and expenses
 11. **Use `--engine` filter** in logs command to analyze specific AI engine performance
+12. **Prefer sanitized context text** - Use `${{ needs.task.outputs.text }}` instead of raw `github.event` fields for security
 
 ## Validation
 
@@ -894,4 +936,34 @@ The workflow frontmatter is validated against JSON Schema during compilation. Co
 - **Invalid enum values** - e.g., `engine` must be "claude", "codex", or "custom"
 - **Missing required fields** - Some triggers require specific configuration
 
-Use `gh aw compile --verbose` to see detailed validation messages, or `gh aw compile <workflow-id> --verbose` to validate a specific workflow.
\ No newline at end of file
+Use `gh aw compile --verbose` to see detailed validation messages, or `gh aw compile <workflow-id> --verbose` to validate a specific workflow.
+
+## CLI
+
+### Installation
+
+```bash
+gh extension install githubnext/gh-aw
+```
+
+If there are authentication issues, use the standalone installer:
+
+```bash
+curl -O https://raw.githubusercontent.com/githubnext/gh-aw/main/install-gh-aw.sh
+chmod +x install-gh-aw.sh
+./install-gh-aw.sh
+```
+
+### Compile Workflows
+
+```bash
+# Compile all workflows in .github/workflows/
+gh aw compile
+
+# Compile a specific workflow
+gh aw compile <workflow-id>
+```
+
+### Documentation
+
+For complete CLI documentation, see: https://githubnext.github.io/gh-aw/tools/cli/
\ No newline at end of file
diff --git a/pkg/cli/templates/instructions.md b/pkg/cli/templates/instructions.md
index 6c3ac0d0ab4..5e9892873c2 100644
--- a/pkg/cli/templates/instructions.md
+++ b/pkg/cli/templates/instructions.md
@@ -49,7 +49,7 @@ The YAML frontmatter supports these fields:
   - Available permissions: `contents`, `issues`, `pull-requests`, `discussions`, `actions`, `checks`, `statuses`, `models`, `deployments`, `security-events`
 
 - **`runs-on:`** - Runner type (string, array, or object)
-- **`timeout_minutes:`** - Workflow timeout (integer)
+- **`timeout_minutes:`** - Workflow timeout (integer, has sensible default and can typically be omitted)
 - **`concurrency:`** - Concurrency control (string or object)
 - **`env:`** - Environment variables (object or string)
 - **`if:`** - Conditional execution expression (string)
@@ -66,10 +66,11 @@ The YAML frontmatter supports these fields:
     ```yaml
     engine:
       id: claude                        # Required: coding agent identifier (claude, codex, custom)
-      version: beta                     # Optional: version of the action
-      model: claude-3-5-sonnet-20241022 # Optional: LLM model to use
-      max-turns: 5                      # Optional: maximum chat iterations per run
+      version: beta                     # Optional: version of the action (has sensible default)
+      model: claude-3-5-sonnet-20241022 # Optional: LLM model to use (has sensible default)
+      max-turns: 5                      # Optional: maximum chat iterations per run (has sensible default)
     ```
+  - **Note**: The `version`, `model`, and `max-turns` fields have sensible defaults and can typically be omitted unless you need specific customization.
   - **Custom engine format** (⚠️ experimental):
     ```yaml
     engine:
@@ -911,11 +912,13 @@ Agentic workflows compile to GitHub Actions YAML:
 
 ## Best Practices
 
+**⚠️ IMPORTANT**: Run `gh aw compile` after every workflow change to generate the GitHub Actions YAML file.
+
 1. **Use descriptive workflow names** that clearly indicate purpose
 2. **Set appropriate timeouts** to prevent runaway costs
 3. **Include security notices** for workflows processing user content  
 4. **Use @include directives** for common patterns and security boilerplate
-5. **Test with `gh aw compile`** before committing (or `gh aw compile <workflow-id>` for specific workflows)
+5. **ALWAYS run `gh aw compile` after every change** to generate the GitHub Actions workflow (or `gh aw compile <workflow-id>` for specific workflows)
 6. **Review generated `.lock.yml`** files before deploying
 7. **Set `stop-after`** in the `on:` section for cost-sensitive workflows
 8. **Set `max-turns` in engine config** to limit chat iterations and prevent runaway loops
diff --git a/pkg/cli/workflows/test-ai-inference-github-models.lock.yml b/pkg/cli/workflows/test-ai-inference-github-models.lock.yml
index e8205b57d5a..16ee60b72e8 100644
--- a/pkg/cli/workflows/test-ai-inference-github-models.lock.yml
+++ b/pkg/cli/workflows/test-ai-inference-github-models.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test AI Inference GitHub Models"
 on:
diff --git a/pkg/cli/workflows/test-claude-add-issue-comment.lock.yml b/pkg/cli/workflows/test-claude-add-issue-comment.lock.yml
index 28b9653c548..b6cb06a8fbc 100644
--- a/pkg/cli/workflows/test-claude-add-issue-comment.lock.yml
+++ b/pkg/cli/workflows/test-claude-add-issue-comment.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude Add Issue Comment"
 on:
diff --git a/pkg/cli/workflows/test-claude-add-issue-labels.lock.yml b/pkg/cli/workflows/test-claude-add-issue-labels.lock.yml
index 9d04f5f2368..f9c04f72ed2 100644
--- a/pkg/cli/workflows/test-claude-add-issue-labels.lock.yml
+++ b/pkg/cli/workflows/test-claude-add-issue-labels.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude Add Issue Labels"
 on:
diff --git a/pkg/cli/workflows/test-claude-cache-memory.lock.yml b/pkg/cli/workflows/test-claude-cache-memory.lock.yml
index df0ac3032d6..e8acb2f0a82 100644
--- a/pkg/cli/workflows/test-claude-cache-memory.lock.yml
+++ b/pkg/cli/workflows/test-claude-cache-memory.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude with Cache Memory File Share"
 on:
diff --git a/pkg/cli/workflows/test-claude-command.lock.yml b/pkg/cli/workflows/test-claude-command.lock.yml
index b7a546f39c2..da44702036c 100644
--- a/pkg/cli/workflows/test-claude-command.lock.yml
+++ b/pkg/cli/workflows/test-claude-command.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude Command"
 on:
diff --git a/pkg/cli/workflows/test-claude-create-issue.lock.yml b/pkg/cli/workflows/test-claude-create-issue.lock.yml
index af0d09208f3..5595966abde 100644
--- a/pkg/cli/workflows/test-claude-create-issue.lock.yml
+++ b/pkg/cli/workflows/test-claude-create-issue.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude Create Issue"
 on:
diff --git a/pkg/cli/workflows/test-claude-create-pull-request-review-comment.lock.yml b/pkg/cli/workflows/test-claude-create-pull-request-review-comment.lock.yml
index bedc82e23e5..8548c206480 100644
--- a/pkg/cli/workflows/test-claude-create-pull-request-review-comment.lock.yml
+++ b/pkg/cli/workflows/test-claude-create-pull-request-review-comment.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude Create Pull Request Review Comment"
 on:
diff --git a/pkg/cli/workflows/test-claude-create-pull-request.lock.yml b/pkg/cli/workflows/test-claude-create-pull-request.lock.yml
index f7d55e3b53c..b42527425e3 100644
--- a/pkg/cli/workflows/test-claude-create-pull-request.lock.yml
+++ b/pkg/cli/workflows/test-claude-create-pull-request.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude Create Pull Request"
 on:
diff --git a/pkg/cli/workflows/test-claude-create-repository-security-advisory.lock.yml b/pkg/cli/workflows/test-claude-create-repository-security-advisory.lock.yml
index 5d879e72891..7f66c34750b 100644
--- a/pkg/cli/workflows/test-claude-create-repository-security-advisory.lock.yml
+++ b/pkg/cli/workflows/test-claude-create-repository-security-advisory.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude Create Repository Security Advisory"
 on:
diff --git a/pkg/cli/workflows/test-claude-markitdown-mcp.lock.yml b/pkg/cli/workflows/test-claude-markitdown-mcp.lock.yml
index 1cc914a73bd..16c0a567e99 100644
--- a/pkg/cli/workflows/test-claude-markitdown-mcp.lock.yml
+++ b/pkg/cli/workflows/test-claude-markitdown-mcp.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude Markitdown MCP"
 on:
diff --git a/pkg/cli/workflows/test-claude-max-patch-size.lock.yml b/pkg/cli/workflows/test-claude-max-patch-size.lock.yml
index 0ccf769e445..0f3aecd06a6 100644
--- a/pkg/cli/workflows/test-claude-max-patch-size.lock.yml
+++ b/pkg/cli/workflows/test-claude-max-patch-size.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude Patch Size Validation"
 on:
diff --git a/pkg/cli/workflows/test-claude-mcp.lock.yml b/pkg/cli/workflows/test-claude-mcp.lock.yml
index 9178cbd5420..d6515bc042d 100644
--- a/pkg/cli/workflows/test-claude-mcp.lock.yml
+++ b/pkg/cli/workflows/test-claude-mcp.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude MCP"
 on:
diff --git a/pkg/cli/workflows/test-claude-missing-tool.lock.yml b/pkg/cli/workflows/test-claude-missing-tool.lock.yml
index 263d00f1abc..80ca288772e 100644
--- a/pkg/cli/workflows/test-claude-missing-tool.lock.yml
+++ b/pkg/cli/workflows/test-claude-missing-tool.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude with Missing Tool Safe Output and Cache Memory"
 on:
diff --git a/pkg/cli/workflows/test-claude-patch-size-exceeded.lock.yml b/pkg/cli/workflows/test-claude-patch-size-exceeded.lock.yml
index 643991d0334..fce676d8411 100644
--- a/pkg/cli/workflows/test-claude-patch-size-exceeded.lock.yml
+++ b/pkg/cli/workflows/test-claude-patch-size-exceeded.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude Patch Size Limit Exceeded"
 on:
diff --git a/pkg/cli/workflows/test-claude-push-to-pr-branch.lock.yml b/pkg/cli/workflows/test-claude-push-to-pr-branch.lock.yml
index 426edb7b037..e97371e3ab8 100644
--- a/pkg/cli/workflows/test-claude-push-to-pr-branch.lock.yml
+++ b/pkg/cli/workflows/test-claude-push-to-pr-branch.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude Push to PR Branch"
 on:
diff --git a/pkg/cli/workflows/test-claude-update-issue.lock.yml b/pkg/cli/workflows/test-claude-update-issue.lock.yml
index 278548bfcf2..3b10bfa6f5b 100644
--- a/pkg/cli/workflows/test-claude-update-issue.lock.yml
+++ b/pkg/cli/workflows/test-claude-update-issue.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Claude Update Issue"
 on:
diff --git a/pkg/cli/workflows/test-codex-add-issue-comment.lock.yml b/pkg/cli/workflows/test-codex-add-issue-comment.lock.yml
index e80706fec1c..6e183142429 100644
--- a/pkg/cli/workflows/test-codex-add-issue-comment.lock.yml
+++ b/pkg/cli/workflows/test-codex-add-issue-comment.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Codex Add Issue Comment"
 on:
diff --git a/pkg/cli/workflows/test-codex-add-issue-labels.lock.yml b/pkg/cli/workflows/test-codex-add-issue-labels.lock.yml
index af534d837a8..67ab0e94169 100644
--- a/pkg/cli/workflows/test-codex-add-issue-labels.lock.yml
+++ b/pkg/cli/workflows/test-codex-add-issue-labels.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Codex Add Issue Labels"
 on:
diff --git a/pkg/cli/workflows/test-codex-command.lock.yml b/pkg/cli/workflows/test-codex-command.lock.yml
index 6215376f021..b9a290769be 100644
--- a/pkg/cli/workflows/test-codex-command.lock.yml
+++ b/pkg/cli/workflows/test-codex-command.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Codex Command"
 on:
diff --git a/pkg/cli/workflows/test-codex-custom-env.lock.yml b/pkg/cli/workflows/test-codex-custom-env.lock.yml
index b7481eddbf8..df622ee89c5 100644
--- a/pkg/cli/workflows/test-codex-custom-env.lock.yml
+++ b/pkg/cli/workflows/test-codex-custom-env.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Codex Custom Environment Variable"
 on:
diff --git a/pkg/cli/workflows/test-playwright-accessibility-contrast.lock.yml b/pkg/cli/workflows/test-playwright-accessibility-contrast.lock.yml
index 70dbebfe1e2..52319675db6 100644
--- a/pkg/cli/workflows/test-playwright-accessibility-contrast.lock.yml
+++ b/pkg/cli/workflows/test-playwright-accessibility-contrast.lock.yml
@@ -1,6 +1,7 @@
 # This file was automatically generated by gh-aw. DO NOT EDIT.
 # To update this file, edit the corresponding .md file and run:
 #   gh aw compile
+# For more information: https://github.com/githubnext/gh-aw/blob/main/.github/instructions/github-agentic-workflows.instructions.md
 
 name: "Test Playwright Accessibility Contrast"
 on:
