Automation
Plugin
gh-aw
GitHub Agentic Workflows (gh-aw) lets you write repository automation in plain Markdown and run AI coding agents — GitHub Copilot, Claude Code, OpenAI Codex, or Google Gemini — inside GitHub Actions, with sandboxed execution, read-only defaults, and safe
Plugin Signal67/100Solid
maintained100
capable29
documented55
adopted79
Install
$ npx -y skills add github/gh-aw --agent claude-code
Run the curl in your terminal, the rest in Claude Code.
Stats
4,897
Stars
489
Forks
Active
Maintenance
Go
Language
MIT
License
1h ago
Last commit
0y ago
Created
Repo: github/gh-aw
In this plugin
See everything inside What's inside
Agents
2hierarchical-agents-quickstartThis guide explains the new meta-orchestrator agents and their operational usage.hierarchical-agentsThis document describes the hierarchical agent management system in GitHub Agentic Workflows, which provides meta-orchestration capabilities to manage the 120+ agents in the repository.
README
1Hey agent! If this repository hasn't been configured with agentic workflows yet, here is how to set it up.
-
Install the
gh awCLI extension using the install script (no GitHub token required):curl -sL https://raw.githubusercontent.com/github/gh-aw/main/install-gh-aw.sh | bash -
Run the
initcommand to configure the repository:gh aw init -
Add a daily repo status agentic workflow using the
addcommand:gh aw add --create-pull-requestThe workflow should:
- Run on a daily schedule
- Summarize the repository status (open issues, recent PRs, CI health)
- Use the Quick Start engine selector to choose your runtime:
- For
copilot, grantcopilot-requests: write - For
claude, set theANTHROPIC_API_KEYrepository secret - For
codex, set theOPENAI_API_KEYrepository secret - For
gemini, set theGEMINI_API_KEYrepository secret
- For
GitHub Agentic Workflows
GitHub Agentic Workflows (gh-aw) lets you write repository automation in plain Markdown and run AI coding agents — GitHub Copilot, Claude Code, OpenAI Codex, or Google Gemini — inside GitHub Actions, with sandboxed execution, read-only defaults, and safe outputs for writes.
[!NOTE] Releases 0.68.4 through 0.71.3 are being retired due to a bug that impacts billing. If you are running one of these versions, please upgrade to the latest release as soon as possible.
Contents
- Quick Start
- Overview
- Guardrails
- Documentation
- FAQ
- Contributing
- Community Contributions
- Share Feedback
- Peli's Agent Factory
- Related Projects
- Workshop
Quick Start
Ready to get your first agentic workflow running? Follow our step-by-step Quick Start Guide to install the extension, add a sample workflow, and see it in action.
Overview
Learn about the concepts behind agentic workflows, explore available workflow types, and understand how AI can automate your repository tasks. See How It Works. Supports GitHub Copilot, Claude (Anthropic), Codex (OpenAI), and Gemini (Google) — pick whichever AI account you already have.
Guardrails
Guardrails, safety and security are foundational to GitHub Agentic Workflows. Workflows run with read-only permissions by default, with write operations only allowed through sanitized safe-outputs. The system implements multiple layers of protection including sandboxed execution, input sanitization, network isolation, supply chain security (SHA-pinned dependencies), tool allow-listing, and compile-time validation. Access can be gated to team members only, with human approval gates for critical operations, ensuring AI agents operate safely within controlled boundaries. See the Security Architecture for comprehensive details on threat modeling, implementation guidelines, and best practices.
Using agentic workflows in your repository requires careful attention to security considerations and careful human supervision, and even then things can still go wrong. Use it with caution, and at your own risk.
Documentation
For complete documentation, examples, and guides, see the Documentation. If you are an agent, see llms.txt source and llms-full.txt source.
If you are running a version between 0.68.4 and 0.71.3, upgrading is strongly recommended due to a bug that impacts billing.
Contributing
For development setup and contribution guidelines, see CONTRIBUTING.md.
Custom Go linters
To build and test repository custom linters:
go test ./pkg/linters/<linter-name>/...go build ./cmd/lintersmake golint-custom
make golint-custom builds cmd/linters and runs the custom analyzers against ./cmd/... and ./pkg/....
🌍 Community Contributions
Community members whose issues were resolved — updated automatically.
@aaronspindler (1) @abillingsley (2) @adam-cobb (1) @adamhenson (2) @adamtasteslikegood (1) @adhikjoshi (1) @ahmadabdalla (1) @ajfeldman6 (1) @AkshatRaj00 (1) @alanpeabody (1) @alcastaneda (1) @AlexanderWert (1) @AlexDeMichieli (1) @alexsiilvaa (2) @alondahari (17) @alvistar (2) @AmoebaChant (1) @anthonymastreanvae (10) @aoxiangtianyu-go (1) @apenab (1) @arabkin (1) @arezero (6) @arthurfvives (8) @Artur- (1) @askpaisa (1) @askpt (1) @astefan (1) @awoisoak (1) @b2pacific (1) @babaakihiro (2) @bartul (1) @bbonafed (23) @beardofedu (1) @benissimo (7) @benvillalobos (12) @blozano-tt (7) @bmerkle (3) @boydj (2) @Bra1nFartz (1) @BrandonLewis (1) @bryanchen-d (22) @bryanknox (1) @bshore-bf (1) @Calidus (7) @camposbrunocampos (2) @carlincherry (1) @carlosflorencio (1) @CatsMiaow (1) @chepa92 (1) @chrisfregly (2) @chrizbo (7) @CiscoRob (2) @cknight (2) @clementbolin (1) @cogni-ai-ee (2) @consulthys (3) @Corb3nik (3) @corygehr (20) @corymhall (1) @crmitchelmore (1) @dagecko (1) @Daidanny008 (1) @Dan-Albrecht (1) @Dan-Co (2) @danielmeppiel (6) @danquirk (1) @darwin-gonzales (1) @davidahmann (3) @davidslater (1) @dbudym-cs (1) @DeagleGross (2) @devantler (2) @deyaaeldeen (10) @dfrysinger (2) @dgolombek (1) @dholmes (3) @dhrapson (2) @DimaBir (1) @dkurepa (1) @DogeAmazed (1) @doughgle (1) @drehelis (4) @DrPye (1) @dsfaccini (1) @dsibilio (3) @dsolteszopyn (2) @dsyme (33) @duncankmckinnon (1) @eaftan (3) @edburns (1) @edgeq (2) @elika56 (1) @emexelem (1) @enbw-mmattes (1) @eran-medan (1) @ericchansen (1) @ericstj (2) @Esomoire-consultancy-Company (1) @Etienne-M (1) @Evangelink (5) @fbecar22 (2) @FDevTakima (1) @ferryhinardi (1) @flatiron32 (2) @florianbader (1) @fr4nc1sc0-r4m0n (1) @funkymonkeyjam (2) @G1Vh (1) @GandrotulaRajesh (1) @github-actions (10) @github-antoine-brechon (4) @GKersten (1) @glitch-ux (1) @grahame-white (9) @graphaelli (1) @GregoireW (1) @h-no (1) @h3y6e (2) @haavamoa (1) @haolpku (1) @harrisoncramer (2) @heaversm (1) @heiskr (6) @hermanho (1) @holwerda (3) @hpsin (1) @hrishikeshathalye (1) @ianreay (1) @IEvangelist (14) @Infinnerty (1) @insop (1) @ivancea (9) @j-srodka (6) @jamesadevine (4) @JamesNK (4) @JanKrivanek (4) @jaroslawgajewski (26) @JasonYeMSFT (1) @jbaruch (1) @jcooklin (1) @jeffhandley (12) @jeremiah-snee-openx (1) @jfomhover (1) @jhamon (2) @jitran (4) @joesturge (1) @johnpreed (5) @johnwilliams-12 (11) @jonathanpeppers (4) @joperezr (1) @JoshGreenslade (2) @jsalmassy (1) @jsoref (2) @jsquire (1) @jtracey93 (1) @kaovilai (4) @karl-petter-sj (1) @katriendg (1) @kbreit-insight (5) @KGoovaer (1) @kkruel8100 (1) @Krzysztof-Cieslak (1) @kthompson (1) @labudis (2) @ladamski (1) @lecoursen (1) @lilseyi (2) @lindeberg (1) @loganrosen (4) @look (1) @lpcox (6) @ludoviclafole (1) @lukeed (1) @lupinthe14th (3) @m-titov (1) @maikelvdh (2) @mark-hingston (1) @mason-tim (8) @matiloti (4) @mattcosta7 (1) @MatthewBunker (2) @MatthewLabasan-NBCU (2) @MattSkala (3) @MauroDruwel (4) @maxbeizer (1) @maxknv (1) @mcantrell (1) @mdashrraf (1) @MH0386 (1) @mhavelock (1) @michen00 (2) @microsasa (9) @mlinksva (1) @mnkiefer (5) @molson504x (2) @Mossaka (3) @mrfelton (5) @mrjf (7) @MrSanchez (1) @mstrathman (1) @mvdbos (2) @nestele (2) @neta-vega (3) @NicoAvanzDev (3) @NicolasRannou (1) @nihal467 (1) @Nikhil-Anand-DSG (1) @NikolajBjorner (2) @norrietaylor (8) @not-mksv (1) @octatone (1) @oscarvalenzuelab (1) @PaulAylward2 (1) @petercort (1) @pethers (1) @pgaskin (1) @pholleran (4) @Phonesis (1) @Pierrci (1) @plengauer (1) @pmalarme (1) @polmichel (2) @ppusateri (1) @praveenkuttappan (1) @PureWeen (9) @qwert666 (1) @r-garcia-de-oliveira (2) @rabo-unumed (4) @racedale (1) @radiantspace (2) @rafael-unloan (1) @rbstp (2) @reggie-k (3) @rhardouin (2) @rmarinho (1) @romainh-betclic (3) @rspurgeon (4) @Rubyj (3) @ruokun-niu (1) @ryckmansm (2) @salekseev (3) @salmanmkc (1) @samuelkahessay (30) @samus-aran (1) @SanthoshNandha (1) @sbodapati-gfm (1) @seangibeault (2) @seesharprun (4) @sg650 (13) @shawnHartsell (1) @shiran-gutsy (1) @shubhamtanwar23 (3) @siyo-rms (1) @srgibbs99 (6) @ssulei7 (1) @stacktick (1) @stefankrzyz (1) @steliosfran (3) @straub (6) @strawgate (45) @susmahad (3) @swimmesberger (1) @syarihu (1) @szabta89 (3) @tadelesh (1) @Tarekchehahde (2) @theletterf (17) @thi-feonir (1) @timdittler (3) @tinytelly (1) @tobio (1) @tomasmed (1) @tore-unumed (16) @trask (4) @tsm-harmoney (5) @tspascoal (2) @tvu4-wowcorp (1) @tylersmalley (1) @UncleBats (2) @v1v (4) @verkyyi (2) @veverkap (3) @ViktorHofer (3) @virenpepper (1) @vishalagrawal-jisr (2) @whoschek (1) @wizardofosmium (1) @wtgodbe (4) @xirzec (1) @yaananth (1) @Yoyokrazy (2) @yskopets (53) @zarenner (5) @zkoppert (2)
Related Projects
GitHub Agentic Workflows is supported by companion projects that provide additional security and integration capabilities:
- Agent Workflow Firewall (AWF) - Network egress control for AI agents, providing domain-based access controls and activity logging for secure workflow execution
- MCP Gateway - Routes Model Context Protocol (MCP) server calls through a unified HTTP gateway for centralized access management
- gh-aw-actions - Shared library of custom GitHub Actions used by compiled workflows, providing functionality such as MCP server file management
Workshop
[!TIP] Ready to learn GitHub Agentic Workflows hands-on? The Factory Tour Workshop is a self-contained, step-by-step workshop repository designed to teach you how to build, run, and customize agentic workflows from scratch.
File tree
1917github/gh-awView on GitHub
.architecture.yml .changeset/ 1773446645-configure-gh-for-ghe.md bash-allowlist-unsupported-engine-guided-error.md breaking-aw-add-config-packages.md engine-model-to-top-level.md fix-apply-samples-siderepo-target-repo.md fix-behavior-engine-mcp-gateway-startup.md fix-filtered-bundle-checkout-hooks.md fix-github-tool-config-codemods.md fix-logs-processed-runs-shadowing.md fix-protocol-relative-url-userinfo-bypass.md fix-push-repo-memory-misleading-error-message.md fix-ready-for-review-pull-request-target.md fix-safe-outputs-dynamic-input-mcp-container.md fix-zero-arg-safeoutputs-tools.md giant-hotels-wink.md hint-jq-file-injection-safe-outputs-prompt.md list-label-name-filter.md major-remove-antigravity-engine.md major-remove-engine-token-weights.md major-remove-imports-if.md major-remove-opencode-engine.md minor-add-behavior-defined-engine-log-parser.md minor-add-cli-proxy-feature-flag.md minor-add-concurrency-queue-support.md minor-add-sbx-bounded-query-runtime.md minor-arc-dind-runner-topology.md minor-auto-hoist-run-expressions-codemod.md minor-copilot-sdk-driver-multilang.md minor-copilot-sdk-driver.md minor-copilot-sdk-non-experimental.md minor-decouple-status-comment.md minor-disable-agent-sandbox-only.md minor-disable-rubber-duck-for-copilot-engine.md minor-docker-sbx-runtime-support.md minor-enable-reaction-status-comment-by-default.md minor-expose-api-proxy-model-fallback-frontmatter.md minor-gvisor-runtime-support.md minor-mcp-gateway-otlp-headers-string-only.md minor-org-update-mode.md minor-otlp-headers-env-var.md minor-pi-agent-core-driver.md minor-precompute-usage-activity-reporting.md minor-preserve-branch-name-in-safe-outputs.md minor-rename-app-to-github-app.md minor-rename-llmgateway-port.md minor-rename-network-isolation-to-sudo.md minor-rename-safe-inputs-to-mcp-scripts.md minor-update-mcpg-v0-1-5.md org-update-resilience.md patch-activation-activation-artifact.md patch-activation-github-token-config.md patch-activation-info.md patch-add-audit-diff-command.md patch-add-audit-report-command.md patch-add-aw-context-workflow-dispatch-traceability.md patch-add-closing-comments-bug.md patch-add-codex-harness-retry.md patch-add-comment-not-cancelled-on-code-push-failure.md patch-add-copilot-driver-retry-resume.md patch-add-copilot-no-ask-user-flag.md patch-add-copilot-requests-feature.md patch-add-dependencies-env-apm.md patch-add-emoji-frontmatter-field.md patch-add-engine-bare-frontmatter-field.md patch-add-gemini-yolo-flag.md patch-add-git-helpers-safe-outputs.md patch-add-github-guard-blocked-users-approval-labels.md patch-add-history-link-add-comment-issue-pr.md patch-add-history-link-footers.md patch-add-import-schema-uses-with.md patch-add-inline-sub-agent-syntax.md patch-add-label-command-trigger.md patch-add-mcp-actor-validation.md patch-add-model-aliases.md patch-add-models-frontmatter-field.md patch-add-multiple-workflows.md patch-add-playwright-cli-mode.md patch-add-post-cleanup-script.md patch-add-push-repo-memory-tool.md patch-add-reply-review-config.md patch-add-safe-output-actions.md patch-add-safe-output-blocked-list.md patch-add-safe-output-scripts.md patch-add-set-issue-type-safe-output.md patch-add-trufflehog-shared-workflow.md patch-add-unassign-safe-output.md patch-add-upload-artifact-safe-output.md patch-add-wizard-copilot-auth-method-prompt.md patch-add-workflow-call-id-marker.md patch-add-xpia-system-prompt.md patch-agent-log-token-delta.md patch-ai-credit-resolution-order.md patch-aic-usage-cache.md patch-align-copilot-info-model-default.md patch-align-detection-model-default.md patch-align-shared-apm.md patch-allow-wildcard-target-repo-safe-outputs.md patch-apply-samples-cross-repo-subdir-staging.md patch-assign-to-user-unassign-first.md patch-audit-jq-schema.md patch-audit-parallel-analysis.md patch-auto-bundle-on-merge-commits.md patch-awf-default-ai-credits-pricing-version-guard.md patch-awf-double-quote-domain-args.md patch-awf-reflect-summary.md patch-awf-spec-sync-v0-25-43.md patch-bump-agentic-cli-versions.md patch-bump-awf-firewall-and-mcpg-images.md patch-bump-awf-to-v0-23-0.md patch-bump-awf-v0-13-12.md patch-bump-awf-v0-14-0.md patch-bump-awf-v0-16-3.md patch-bump-awf-v0-20-1.md patch-bump-awf-v0-20-2.md patch-bump-awf-v0-24-0.md patch-bump-awf-v0-24-1.md patch-bump-awf-v0-24-2.md patch-bump-awf-v0-24-3.md patch-bump-awf-v0-25-14.md patch-bump-awf-v0-25-24-mcpg-v0-2-24.md patch-bump-awf-v0-25-39.md patch-bump-awf-v0-25-40.md patch-bump-awf-v0-25-41.md patch-bump-awf-v0-25-42.md patch-bump-awf-v0-25-43.md patch-bump-awf-v0-25-44.md patch-bump-awf-v0-25-5.md patch-bump-awf-v0-25-51-mcpg-v0-3-17.md patch-bump-awf-v0-25-52.md patch-bump-awf-v0-25-54.md patch-bump-awf-v0-25-55-mcpg-v0-3-19.md patch-bump-awf-v0-25-57-mcpg-v0-3-21.md patch-bump-awf-v0-25-65-mcpg-v0-3-23.md patch-bump-awf-v0-25-66.md patch-bump-awf-v0-25-68.md patch-bump-awf-v0-27-0.md patch-bump-awf-v0-27-1.md patch-bump-awf-v0-27-11.md patch-bump-awf-v0-27-12-mcpg-v0-3-31.md patch-bump-awf-v0-27-16.md patch-bump-awf-v0-27-27-mcpg-v0-4-0.md patch-bump-awf-v0-27-28.md patch-bump-awf-v0-27-30.md patch-bump-awf-v0-27-31.md patch-bump-awf-v0-27-37.md patch-bump-awf-v0-27-39-mcpg-v0-4-4.md patch-bump-awf-v0-27-41-mcpg-v0-4-5.md patch-bump-awf-v0-27-42-mcpg-v0-4-6.md patch-bump-awf-v0-27-43-mcpg-v0-4-7.md patch-bump-awf-v0-27-44-mcpg-v0-4-8.md patch-bump-awf-v0-27-6-mcpg-v0-3-27.md patch-bump-awf-v0-27-7.md patch-bump-awf-v0-27-9-mcpg-v0-3-29.md patch-bump-claude-code-copilot-cli.md patch-bump-claude-code-default-version.md patch-bump-claude-copilot-default-versions.md patch-bump-cli-default-versions-2026-05-29.md patch-bump-cli-defaults-2026-02-28.md patch-bump-cli-mcp-versions-2026-04-24.md patch-bump-cli-scanner-versions.md patch-bump-cli-tool-versions-defaults.md patch-bump-cli-tool-versions.md patch-bump-cli-versions-2026-04-10.md patch-bump-cli-versions-2026-06-16.md patch-bump-cli-versions-2026-06-24.md patch-bump-cli-versions-2026-07-02.md patch-bump-clis.md patch-bump-codex-sandbox-runtime.md patch-bump-default-cli-versions.md patch-bump-default-firewall-v0-24-5.md patch-bump-default-firewall-version.md patch-bump-firewall-and-mcpg-defaults.md patch-bump-firewall-gateway.md patch-bump-firewall-mcpg-default-versions.md patch-bump-gemini-cli-0-37-2.md patch-bump-gemini-cli-0-39-1.md patch-bump-gh-aw-firewall-0-25-0.md patch-bump-gh-aw-mcpg-v0-1-25.md patch-bump-gh-aw-mcpg-v0-1-26.md patch-bump-gh-aw-mcpg-v0-2-0.md patch-bump-gh-aw-mcpg-v0-2-15.md patch-bump-gh-aw-mcpg-v0-3-18.md patch-bump-mcp-gateway-and-apm-versions.md patch-bump-mcpg-and-firewall-defaults-v0-3-25-v0-25-67.md patch-bump-mcpg-container-pin-v0-3-6.md patch-bump-mcpg-v0-0-113.md patch-bump-mcpg-v0-3-16-firewall-v0-25-50.md patch-bump-mcpg-v0-3-24.md patch-bump-mcpg-v0-3-25.md patch-bump-mcpg-v0-3-8.md patch-bump-mcpg-v0-3-9.md patch-bump-mcpg-v0-4-1.md patch-cache-apm-bundles-by-engine-and-lock-hash.md patch-canonical-copilot-event-log.md patch-check-mcp-servers-tools-list.md patch-claude-allowed-tools-enforcement.md patch-clean-git-credentials-recursive.md patch-clean-git-credentials.md patch-clean-substitute-placeholders.md patch-clean-tmp-gh-aw.md patch-clean-up-stale-gh-aw-gateway-containers.md patch-cleanup-setup-git-auth.md patch-cli-version-updates-2026-06-21.md patch-cli-version-updates-2026-08-01.md patch-cli-versions-claude-2-1-74-copilot-1-0-4.md patch-compute-safe-output-perms.md patch-conclusion-job-concurrency-group.md patch-concurrency-label-name.md patch-conditional-agent-output.md patch-configurable-memory-file-types.md patch-configure-memory-extensions.md patch-consistent-github-ref-sanitization.md patch-consolidate-awf-command.md patch-containerize-safe-outputs-mcp-server.md patch-copilot-403-org-billing-message.md patch-copilot-driver-null-type-tool-call-fresh-restart.md patch-copilot-home-expansion-self-hosted-runners.md patch-create-pr-max-files-config.md patch-cross-repo-allowlist-validation.md patch-cross-repo-private-callee-auth-guidance.md patch-disable-activation-comments.md patch-disable-codex-llm-gateway.md patch-disable-safe-outputs-http-timeouts.md patch-display-safe-output-secrecy-integrity.md patch-document-agentic-workflows-cli.md patch-document-agentic-workflows-ecosystem.md patch-document-bypasspermissions-security-boundary.md patch-document-current-checkout.md patch-double-quote-awf-domains.md patch-downgrade-claude-code.md patch-drop-cache-name.md patch-embed-engine-markdown.md patch-emit-awf-config-json.md patch-emit-chroot-config-for-arc-dind.md patch-enable-awf-chroot-mode.md patch-enable-copilot-api-proxy.md patch-enable-copilot-llm-gateway-upgrade-firewall.md patch-enable-copilot-llm-gateway.md patch-enforce-add-comment-mcp.md patch-enforce-http-mcp-oidc-awf-version.md patch-enforce-lockdown-strict.md patch-enforce-mcp-gateway-allowlist.md patch-enforce-safe-output-max-limits.md patch-engine-provider-reflect-routing.md patch-ensure-serena-tools.md patch-ensure-temp-id-format.md patch-enterprise-safe-output-url.md patch-escape-mcp-env-secrets.md patch-escape-mcp-template-expressions.md patch-escape-shell-env-vars.md patch-exclude-job-output-credential-env-vars.md patch-exclude-secret-env-vars-from-agent-container.md patch-expand-audit-sections.md patch-extract-copilot-sdk-helpers.md patch-extract-safe-output-tools-max-expressions.md patch-fail-claude-no-log-entries.md patch-fallback-incremental-patch-fetch.md patch-find-repo-checkout-manifest-first.md patch-fix-add-comment-perms.md patch-fix-agent-log-token-redaction.md patch-fix-aic-usage-cache.md patch-fix-allow-domains-expression-quoting.md patch-fix-awf-chroot-home-cleanup.md patch-fix-awf-node-path.md patch-fix-body-import-path-resolution.md patch-fix-cli-proxy-latest-tag-alias.md patch-fix-codex-detection-awf-download.md patch-fix-codex-model-flag.md patch-fix-codex-threat-detection-proxy.md patch-fix-codex-web-search-flag.md patch-fix-configure-gh-for-ghe-gh-token.md patch-fix-continue-auth-failure.md patch-fix-copilot-assignment-concurrency.md patch-fix-copilot-cli-ownership.md patch-fix-copilot-gpu-node-path.md patch-fix-copilot-path-portability.md patch-fix-copilot-sdk-provider.md patch-fix-copilot-sdk-stdin-and-harness-logs.md patch-fix-copilot-toolcache-path-depth.md patch-fix-create-pr-enobufs.md patch-fix-cross-repo-base-branch-checkout.md patch-fix-cross-repo-checkout-ref.md patch-fix-cross-repo-safe-output-handlers.md patch-fix-cross-repo-update-issue.md patch-fix-detection-job-permissions.md patch-fix-detection-step-summary-override.md patch-fix-difc-proxy-gh-host-mismatch.md patch-fix-end-of-options-separator.md patch-fix-gemini-mcp-config.md patch-fix-gh-aw-binary-detection.md patch-fix-ghe-extension-upgrade-host.md patch-fix-ghes-pr-creation.md patch-fix-git-fetch-auth-after-clean-credentials.md patch-fix-github-env-high-vulnerability.md patch-fix-go-path-ordering.md patch-fix-heredoc-delimiter-injection.md patch-fix-infra-lines-in-engine-failure-context.md patch-fix-macos-arm64-smoke-test.md patch-fix-mcp-handshake-readiness.md patch-fix-multi-repo-configure-git-credentials-template-injection.md patch-fix-otlp-oidc-id-token-permissions.md patch-fix-patch-parser-file-protection-bypass.md patch-fix-permission-discussions-warning.md patch-fix-push-repo-memory-enobufs.md patch-fix-push-repo-memory-git-size.md patch-fix-push-signed-commits-refuse-unsigned-fallback.md patch-fix-safe-output-cross-repo-auth.md patch-fix-safe-outputs-staged-handlers.md patch-fix-safeoutputs-tmp-gh-aw-mount.md patch-fix-shell-escape-agent-path-injection.md patch-fix-stale-origin-branch-merge-base.md patch-fix-topo-order-merge-fallback.md patch-forward-copilot-otel-traces.md patch-generalize-wildcard-target-validation.md patch-generate-needs-expressions.md patch-ghes-auto-detect-helpers.md patch-github-api-version-header.md patch-github-enterprise-host.md patch-github-guard-difc-footer-notice.md patch-github-rate-limit-observability.md patch-group-github-output-redirects.md patch-group-reports-flag.md patch-grouped-prompt-redirect.md patch-handle-non-100644-file-modes.md patch-harden-safe-output-field-validation.md patch-harness-watchdog-timeout-default-and-frontmatter.md patch-history-link-footer.md patch-hoist-safe-job-env-expressions.md patch-improve-conclusion-job-steps.md patch-improve-pr-checkout-logging.md patch-include-firewall-audit-artifacts.md patch-increase-default-max-patch-size-4mb.md patch-incremental-bundle-base-exclusion.md patch-inject-difc-proxy-pre-agent-gh.md patch-inject-git-identity-env-vars.md patch-inline-artifact-client.md patch-js-apm-unpack-restore.md patch-latest-agent-versions.md patch-lockdown-validation-activation.md patch-log-cwd-set-docker-dir.md patch-log-gh-cli-version.md patch-log-gh-workflow-errors.md patch-log-mcp-startup-and-smoke-claude-status.md patch-log-run-id.md patch-log-safe-output-items.md patch-log-safe-output-manifest.md patch-mask-inferred-otlp-tokens.md patch-max-bot-mentions.md patch-max-continuations.md patch-max-turn-cache-misses-frontmatter.md patch-mcp-api-key-masking.md patch-merge-detection-job.md patch-merge-firewall-audit-logs-into-agent-artifact.md patch-merge-validate-context.md patch-migrate-set-issue-type-rest.md patch-model-inventory-2026-05-05.md patch-model-inventory-2026-05-06.md patch-model-inventory-2026-05-07.md patch-model-inventory-2026-05-11.md patch-model-inventory-2026-05-16.md patch-model-inventory-2026-05-17.md patch-model-inventory-2026-05-19.md patch-model-inventory-2026-05-21.md patch-model-inventory-2026-05-22.md patch-model-inventory-2026-05-25.md patch-model-inventory-2026-06-01.md patch-model-inventory-2026-06-03.md patch-model-inventory-2026-06-20.md patch-model-inventory-2026-07-01.md patch-model-inventory-2026-07-20.md patch-model-inventory-2026-07-21.md patch-model-inventory-2026-07-27.md patch-mount-mcp-servers-as-clis.md patch-mount-non-opt-tool-cache-in-awf.md patch-move-apm-packaging-into-own-job.md patch-move-gh-aw-root-to-runner-temp.md patch-move-github-checkout.md patch-move-secret-validation.md patch-move-secrets-out-of-run-blocks.md patch-move-sink-visibility-env-var.md patch-multi-repo-checkout.md patch-network-isolation-rootless-sudo-omit.md patch-normalize-gh-host-detection.md patch-object-form-otlp-headers.md patch-optimize-condition-expressions.md patch-optimize-update-command.md patch-package-apm-artifacts.md patch-pass-github-host-to-mcp.md patch-pass-through-docker-host-to-awf.md patch-pin-awf-schema-url.md patch-pin-gh-host-copilot-install.md patch-prefer-actions-toolcache-copilot-cli.md patch-preserve-branch-name-recreate-ref.md patch-preserve-crlf-in-safe-outputs.md patch-prevent-cross-call-closes.md patch-prevent-mcp-secret-masking.md patch-prevent-safeoutput-pr-probing.md patch-propagate-mcp-allowed-filter.md ... 1600 more
Showing a partial view of a very large repo.
FAQ
gh-aw is a Claude Code plugin with 1 hand-picked skill for automation work, indexed on Flowy. Install it with the command on its page. It includes playwright-cli. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.
- What is gh-aw?
- GitHub Agentic Workflows (gh-aw) lets you write repository automation in plain Markdown and run AI coding agents — GitHub Copilot, Claude Code, OpenAI Codex, or Google Gemini — inside GitHub Actions, with sandboxed execution, read-only defaults, and safe
- How do I install gh-aw?
- Run these in Claude Code: npx -y skills add github/gh-aw --agent claude-code. Then prompt normally.
- Does gh-aw auto-invoke its skills?
- Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.
- Is gh-aw free?
- Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.