Suggested test: copilot/sandbox-agent-runtime-gvisor

[github-actions]

Motivation

Link to the gh-aw PR: github/gh-aw#44796 — feat: add sandbox.agent.runtime: gvisor for gVisor container runtime support

Proposed test

• Workflow file: test-copilot-sandbox-agent-runtime-gvisor.md
• Trigger: workflow_dispatch
• Engine: copilot
• Safe output: create-issue
• Variant: standard (gVisor changes the container runtime; nosandbox would defeat the purpose)

Minimal test prompt sketch

Compile and dispatch a workflow with sandbox.agent.runtime: gvisor and sandbox.agent.sudo: true in frontmatter. The agent should create an issue confirming it ran. Verifies that the gVisor install step ran and the AWF config included containerRuntime: gvisor.

New fixtures or secrets needed

None — but requires confirming gVisor is available on the hosted runner before enabling the test.

Notes

New compiler-side frontmatter field with no existing coverage. test-copilot-network-isolation.md exercises sandbox networking but not the runtime field. A nosandbox variant would not apply here since the feature is sandbox-specific.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by 🔍 Suggest New E2E Tests · 27 AIC · ⌖ 5.64 AIC · ⊞ 5.6K · ◷