Add Daily Ecosystem Explorer agentic workflow by Copilot · Pull Request #64096 · github/gh-aw

Copilot · 2026-09-28T23:32:40Z

Adds a daily workflow that works through the gh-aw extension and tools ecosystem a few projects at a time. It keeps its progress in repo-memory and writes a blog post for projects that score highly. Adapted from daily-agent-of-the-day-blog-writer.md.

Files: .github/workflows/daily-ecosystem-explorer.md and its compiled .lock.yml. The workflow has not been run yet.

Repo-memory state (`memory/ecosystem-explorer` branch)

backlog.json: projects queued for review, oldest first.
reviewed.json: one entry per reviewed project, with a 1–10 score, a one-line summary, cited highlights and a blogged flag.
discovery.json: search queries already used, so they rotate on a 14-day window.
runs.md: one line per run, trimmed to the last 200 lines.

Run loop

Discover (only when the backlog has fewer than 10 items):
- repo topics gh-aw and agentic-workflows
- code search for gh-aw frontmatter markers
- gh-* CLI extensions
- shared components and MCP servers
- githubnext/agentics and githubnext/agentic-ops
Forks, archived repos, already-reviewed projects and github/gh-aw itself are skipped.
Explore: reviews up to 3 projects per run, scored on novelty, usefulness, guardrails, docs and maintenance.
Blog: picks the top unblogged project scoring ≥ 8, even if it was reviewed on an earlier day. It writes docs/src/content/docs/blog/YYYY-MM-DD-ecosystem-spotlight.md explaining why the project stands out and opens a draft [blog] PR. Otherwise the run ends with noop and a short summary.

Guardrails

Read-only permissions, strict mode and the AWF sandbox. The generated PR can only touch docs/src/content/docs/blog/**.
Runs on a fuzzy daily schedule and is skipped while an Ecosystem Spotlight blog PR is still open.
The agent treats content from other repos as untrusted: it ignores instructions found there and never runs their code.
No web-fetch: strict mode rejects it for Copilot because it bypasses the network allowlist. Discovery uses the GitHub MCP repos and search toolsets instead.

Security review note

Compiling added four restricted secrets from the shared shared/otlp.md telemetry import, which the Agent of the Day workflow already uses:

GH_AW_OTEL_GRAFANA_AUTHORIZATION
GH_AW_OTEL_GRAFANA_ENDPOINT
GH_AW_OTEL_SENTRY_AUTHORIZATION
GH_AW_OTEL_SENTRY_ENDPOINT

They are only used to export telemetry. No new third-party actions were added. Reviewers should confirm these are acceptable for this workflow.

✨ PR Review Safe Output Test - Run 36502480499

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

clients2.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "clients2.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · claude · sonnet46 · 53.5 AIC · ⌖ 17 AIC · ⊞ 8K · ◷
_{Comment /smoke-claude to run again}

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

+  bash: ["*"]
+  github:
+    mode: local
+    lockdown: false
+    min-integrity: approved
+    toolsets:
+      - repos
+      - search


github-actions

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

clients2.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "clients2.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · claude · sonnet46 · 53.5 AIC · ⌖ 17 AIC · ⊞ 8K
_{Comment /smoke-claude to run again}

github-actions · 2026-09-29T00:29:54Z

+private: true
+emoji: "🧭"
+name: Daily Ecosystem Explorer
+description: Systematically explores the GitHub Agentic Workflows extension and tools ecosystem, tracks progress in repo-memory, and writes a blog post when an extension stands out


📝 Great description! Consider adding a note about the frequency of blog post generation to help reviewers understand expected output volume.

github-actions · 2026-09-29T00:29:55Z

+  schedule: daily
+  workflow_dispatch:
+  skip-if-match: 'is:pr is:open label:blog in:title "Ecosystem Spotlight"'
+max-daily-ai-credits: 10000


⚙️ The max-daily-ai-credits: 10000 limit looks reasonable for daily exploration. It might be worth documenting the rationale for this value in comments for future reference.

Copilot

Warning

Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.

Copilot review overview

Review effort: Lite
Findings: 4

Open (4)

The PR description states the workflow uses “Read-only permissions”, but the compiled workflow… · New
The safe-output name is written as create-pull-request in frontmatter but referenced as… · New
This instructs using a UTC date in the blog filename, but the compiled workflow sets a non-UTC… · New
The safe-output name is written as create-pull-request in frontmatter but referenced as… · New

What changed in this PR

Adds a new “Daily Ecosystem Explorer” gh-aw workflow that continuously discovers and reviews gh-aw ecosystem projects, persists its progress in repo-memory, and drafts an “Ecosystem Spotlight” blog PR when a project scores highly.

Changes:

Introduces a new daily agentic workflow prompt/spec for discovery → review → blog → memory update.
Adds safe-outputs constraints to limit PR writes to docs/src/content/docs/blog/** and uses repo-memory on a dedicated branch.
Commits the compiled .lock.yml GitHub Actions workflow generated from the .md source.

File	Description
.github/workflows/daily-ecosystem-explorer.md	Defines the agent behavior, repo-memory schema, blogging rules, and safety constraints.
.github/workflows/daily-ecosystem-explorer.lock.yml	Generated workflow implementation (jobs, containers, permissions, safe-outputs enforcement) for execution on GitHub Actions.

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

+    permissions:
+      actions: read
+      contents: write
+      issues: write
+      pull-requests: write


+    description: "Exploration backlog, reviewed extensions/tools with scores, and blog history for the gh-aw ecosystem explorer"
+    file-glob: ["*.json", "*.md"]
+    max-file-size: 102400
+safe-outputs:


+
+### 5) Write the blog post
+
+Create `docs/src/content/docs/blog/YYYY-MM-DD-ecosystem-spotlight.md` (UTC date; append `-2`, `-3` if it exists). Look at an existing post under `docs/src/content/docs/blog/` for frontmatter conventions.


+
+### 7) Finish with exactly one safe output
+
+- `create_pull_request` when a blog post was written. Title: `Ecosystem Spotlight – <name>`. Body: why it was chosen, score and highlights, evidence links, and the file path. The patch must only contain files under `docs/src/content/docs/blog/`. Do not run git write commands yourself.


github-actions · 2026-09-30T17:25:20Z

🎉 This pull request is included in a new release.

Release: v0.90.1

Add daily ecosystem explorer agentic workflow

3d0837d

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI assigned Copilot and pelikhan Sep 28, 2026

Copilot created this pull request from a session on behalf of pelikhan September 28, 2026 23:33 View session

Copilot finished work on behalf of pelikhan September 28, 2026 23:33

Copilot AI requested a review from pelikhan September 28, 2026 23:33

github-advanced-security AI found potential problems Sep 28, 2026

View reviewed changes

Comment thread .github/workflows/daily-ecosystem-explorer.md

Comment on lines +34 to +41

bash: ["*"]

github:

mode: local

lockdown: false

min-integrity: approved

toolsets:

- repos

- search

pelikhan marked this pull request as ready for review September 29, 2026 00:25

Copilot AI balanced review requested due to automatic review settings September 29, 2026 00:25

pelikhan merged commit 09e40b7 into main Sep 29, 2026
1 check passed

pelikhan deleted the copilot/add-daily-agentic-workflows branch September 29, 2026 00:25

github-actions Bot mentioned this pull request Sep 29, 2026

Smoke Test: Claude - 36502480499 #64114

Closed

github-actions Bot reviewed Sep 29, 2026

View reviewed changes

github-actions Bot mentioned this pull request Sep 29, 2026

Smoke Test: Pi - 36503905781 #64123

Closed

Copilot AI reviewed Sep 29, 2026

View reviewed changes

github-actions Bot mentioned this pull request Sep 29, 2026

Smoke Test: Cursor - 36504968208 #64135

Closed

Navigation Menu

Repository navigation

Add Daily Ecosystem Explorer agentic workflow - #64096

Add Daily Ecosystem Explorer agentic workflow#64096
pelikhan merged 1 commit into
mainfrom
copilot/add-daily-agentic-workflows

Copilot AI commented Sep 28, 2026 •

edited by github-actions Bot

Loading

Uh oh!

Uh oh!

github-actions Bot left a comment

Uh oh!

github-actions Bot Sep 29, 2026

Uh oh!

github-actions Bot Sep 29, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

github-actions Bot commented Sep 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants


		### 5) Write the blog post

		Create `docs/src/content/docs/blog/YYYY-MM-DD-ecosystem-spotlight.md` (UTC date; append `-2`, `-3` if it exists). Look at an existing post under `docs/src/content/docs/blog/` for frontmatter conventions.


		### 7) Finish with exactly one safe output

		- `create_pull_request` when a blog post was written. Title: `Ecosystem Spotlight – <name>`. Body: why it was chosen, score and highlights, evidence links, and the file path. The patch must only contain files under `docs/src/content/docs/blog/`. Do not run git write commands yourself.

Conversation

Copilot AI commented Sep 28, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Repo-memory state (memory/ecosystem-explorer branch)

Run loop

Guardrails

Security review note

Uh oh!

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Sep 29, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Sep 29, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Copilot review overview

Uh oh!

github-actions Bot commented Sep 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Copilot AI commented Sep 28, 2026 •

edited by github-actions Bot

Loading

Repo-memory state (`memory/ecosystem-explorer` branch)