Repository navigation
[q] fix(observability): add firewall and mcp artifacts, remove invalid parse param #43654
Description
Q Workflow Optimization Report
Triggered by
@pelikhanin discussion #43645: "make sure to download the agent artifact"
Issues Found (from live data)
daily-observability-report
- Discussion analyzed: [observability] Observability Coverage Report - 2026-07-06 #43645 (Observability Coverage Report - 2026-07-06)
- Reported symptoms: 0% coverage for both AWF Firewall and MCP Gateway across all 18 sampled runs
- Issues Identified:
parse: trueis not a valid parameter for thelogsMCP tool — causes the tool call to fail withUnknown parameter 'parse'- The
artifactsarray was["usage", "agent", "detection"]— missingfirewall(needed foraccess.log) andmcp(needed forgateway.jsonl/rpc-messages.jsonl)
Because the artifact sets for firewall and MCP were never requested, those log files were never downloaded, so the analysis correctly reported 0% coverage — but the root cause was the missing artifact types, not an actual infrastructure problem.
Changes Made
daily-observability-report (.github/workflows/daily-observability-report.md)
Both logs call examples (broad fetch + targeted follow-up) updated:
- Removed invalid
parse: trueparameter - Added
"firewall"artifact set → downloadsaccess.logfor firewall-enabled runs - Added
"mcp"artifact set → downloadsgateway.jsonlandrpc-messages.jsonlfor MCP-enabled runs
Expected Improvements
access.logwill now be downloaded for firewall-enabled runs → firewall coverage > 0%gateway.jsonl/rpc-messages.jsonlwill now be downloaded for MCP-enabled runs → MCP gateway coverage > 0%- Invalid
parseparameter removed → logs calls will no longer fail on parameter validation
Validation
All modified workflows compiled successfully:
- ✅
daily-observability-report
Note: .lock.yml file will be regenerated automatically after merge.
References
- Discussion analyzed: [observability] Observability Coverage Report - 2026-07-06 #43645
- Observability report run: https://github.com/github/gh-aw/actions/runs/28759497392
- Artifact sets available:
all, activation, agent, detection, experiment, firewall, github-api, mcp, usage
Warning
Protected Files — Push Permission Denied
This was originally intended as a pull request, but the patch modifies protected files. A human must create the pull request manually.
Protected files
The push was rejected because GitHub Actions does not have workflows permission to push these changes, and is never allowed to make such changes, or other authorization being used does not have this permission.
Create the pull request manually
# Download the patch from the workflow run
gh run download 28761720561 -n agent -D /tmp/agent-28761720561
# Create a new branch
git checkout -b q/fix-observability-artifact-downloads-fc3e2df5b18ae4ad main
# Apply the patch (--3way handles cross-repo patches)
git am --3way /tmp/agent-28761720561/aw-q-fix-observability-artifact-downloads.patch
# Push the branch and create the pull request
git push origin q/fix-observability-artifact-downloads-fc3e2df5b18ae4ad
gh pr create --title '[q] fix(observability): add firewall and mcp artifacts, remove invalid parse param' --base main --head q/fix-observability-artifact-downloads-fc3e2df5b18ae4ad --repo github/gh-aw🎩 Equipped by Q · 51.3 AIC · ⌖ 8.64 AIC · ⊞ 8K · ◷
Comment /q to run again
- expires on Jul 7, 2026, 5:27 PM UTC-08:00
Activity