[aw] EU CRA / Vulnerabilities: finished without a terminal safe output

Open
#20,150 2 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
48/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Active
Tech stack
github-actions, yaml
Domain
ci-cd, devtools

Research direction

Start with the workflow source at .github/workflows/eu-cra-compliance-vulnerability-handling-auditor.md, then inspect agent-session.jsonl and agent-stdio.log from the linked run to see the final actions. Trace why no terminal safe output was recorded and how the workflow handles that outcome. Done means the workflow emits a terminal safe output and a run confirms it is recorded.

Written by the indexing model from the issue text.

Description

agentic-workflows
What happened

EU CRA / Vulnerabilities finished without a terminal safe output.

View run #41627065517 · Workflow source · Previous failures

Branch: main

Next step

Review the failure details below for a targeted fix, or assign this issue to a coding agent to investigate.

Failure details

[!WARNING]
Missing Tools Reported: A missing-tool signal was recorded; agent text is excluded.

Runtime evidence

[!WARNING]
Task Could Not Be Completed: The workflow recorded a report_incomplete signal: the task was not completed or completion could not be confirmed.

Error details:
Failure classification: missing_terminal_safe_output
Driver exit code: 0
Last tool call status: succeeded
Failed tool calls observed: 1
Safe-output tools: available at gateway snapshot (registered 5 tools)
Safe-output MCP calls observed: 1
Safe-output persistence: nonempty (1 record, 0 malformed; not validation or publication evidence)
No terminal safe output was recorded. These observations do not establish why the agent omitted it; inspect the agent artifact (agent-session.jsonl and agent-stdio.log) for the final actions, then ensure the workflow emits a terminal safe output.

A comment or other safe output does not confirm that the requested task was completed. Only inferred runtime status and error codes are reported; agent text is excluded.

Copy a debugging prompt

Paste this into your coding agent:

Debug the agentic workflow "eu-cra-compliance-vulnerability-handling-auditor" failure.
Follow https://raw.githubusercontent.com/github/gh-aw/main/debug.md
Failed run: https://github.com/githubnext/gh-cao/actions/runs/41627065517

If the repository includes the agentic-workflows skill, load it before investigating.

Manage failure notifications

To stop creating failure issues for this workflow, set this in its frontmatter and recompile:

safe-outputs:
  report-failure-as-issue: false

This only disables issue reporting; it does not fix the failure.

Generated from EU CRA / Vulnerabilities · pi · ~50 AIC · ◷

  • expires on Nov 4, 2026, 11:30 AM UTC
Dominant language
JavaScript
Stars
14
Forks
5
Avg merge
3h 20m
Merged PRs (30d)
811

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from githubnext/gh-cao

All issues in githubnext/gh-cao

Similar issues

More JavaScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.