[docs] Document ANTHROPIC_AUTH_TOKEN protection in API proxy isolation by github-actions[bot] · Pull Request #6414 · github/gh-aw-firewall

github-actions · 2026-07-20T03:21:54Z

Summary

This PR updates the authentication-architecture.md documentation to explicitly document that ANTHROPIC_AUTH_TOKEN is protected alongside ANTHROPIC_API_KEY through the API proxy credential isolation mechanism.

Background

Recent code changes (PR #6410) extended credential protection to include ANTHROPIC_AUTH_TOKEN in addition to ANTHROPIC_API_KEY. The API proxy now excludes both tokens from the agent container environment, keeping them isolated in the api-proxy sidecar only.

Changes

docs/authentication-architecture.md (line 136): Updated the Security Design warning to mention ANTHROPIC_AUTH_TOKEN explicitly alongside ANTHROPIC_API_KEY

The update clarifies that both Anthropic authentication tokens are protected through the same credential isolation mechanism:

Both tokens are excluded from the agent container environment
Both are added to the excluded environment variables list in docker-manager.ts
Both are only made available to the api-proxy sidecar container

Verification

✓ Reviewed recent commits for credential protection changes
✓ Checked docs/authentication-architecture.md for consistency
✓ Verified existing references to ANTHROPIC_AUTH_TOKEN in other docs (api-proxy-sidecar.md, awf-config-spec.md, token-unsetting-fix.md)
✓ Minimal, targeted update to the specific affected line

Related to commit 6d25856: "Protect ANTHROPIC_AUTH_TOKEN in AWF credential isolation paths (Protect ANTHROPIC_AUTH_TOKEN in AWF credential isolation paths #6410)"
Affected by commit 1985ab9: "ci: run awf rootless in smoke-chroot (drop sudo) (ci: run awf rootless in smoke-chroot (drop sudo) #6412)"

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by Documentation Maintainer · 20.6 AIC · ⊞ 4.4K · ◷

Update authentication-architecture.md to explicitly mention ANTHROPIC_AUTH_TOKEN alongside ANTHROPIC_API_KEY in the security design warning. This reflects the recent changes in PR #6410 that protect ANTHROPIC_AUTH_TOKEN through the same credential isolation mechanism. Related to commit 6d25856 (Protect `ANTHROPIC_AUTH_TOKEN` in AWF credential isolation paths). Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-20T05:35:54Z

Documentation Preview

Documentation build failed for this PR. View logs.

Built from commit ed6559b

Copilot

Pull request overview

Documents ANTHROPIC_AUTH_TOKEN as an API-proxy-isolated Anthropic credential.

Changes:

Adds the token to the security design warning.

Show a summary per file

File	Description
`docs/authentication-architecture.md`	Updates protected credential documentation.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 1/1 changed files
Comments generated: 1
Review effort level: Medium

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

github-actions · 2026-07-20T13:46:31Z

✅ Copilot review passed with no inline comments.

@github-actions[bot] Add the ready-for-aw label to this PR to trigger agentic CI smoke tests.

github-actions · 2026-07-20T13:47:08Z

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

github-actions · 2026-07-20T13:47:09Z

🚀 Security Guard has started processing this pull request

github-actions · 2026-07-20T13:47:11Z

🛡️ Smoke Copilot Network Isolation confirmed the egress allowlist is enforced. ✅

github-actions · 2026-07-20T13:47:13Z

✅ Smoke Copilot BYOK AOAI (Entra) completed. Copilot AOAI BYOK (Entra) mode operational. 🔓

github-actions · 2026-07-20T13:47:16Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-07-20T13:47:19Z

✅ Build Test Suite completed successfully!

github-actions · 2026-07-20T13:47:20Z

📡 Smoke OTel Tracing completed. All tracing scenarios validated. ✅

github-actions · 2026-07-20T13:47:24Z

📰 VERDICT: Smoke Docker Sbx has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-07-20T13:47:24Z

🔌 Smoke Services — All services reachable! ✅

github-actions · 2026-07-20T13:47:24Z

✅ Contribution Check completed successfully!

PR #6414 is docs-only and satisfies the applicable contribution guidelines: the description is clear, references related work, and documentation was updated. No review comment needed.

github-actions · 2026-07-20T13:47:26Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-07-20T13:47:27Z

✅ Smoke Claude passed

github-actions · 2026-07-20T13:47:30Z

✅ Smoke Copilot BYOK completed. Copilot BYOK mode operational. 🔓

github-actions · 2026-07-20T13:47:37Z

✅ Smoke Gemini completed. All facets verified. 💎

github-actions · 2026-07-20T13:47:47Z

✅ Smoke Copilot BYOK AOAI (api-key) completed. Copilot AOAI BYOK (api-key) mode operational. 🔓

github-actions · 2026-07-20T13:47:50Z

🔑 Smoke Copilot PAT PAT auth validated. All systems operational. ✅

github-actions · 2026-07-20T13:51:00Z

Smoke test: Copilot network-isolation egress enforcement

EGRESS_RESULT allow=pass deny=pass

✅ Allowed domain (api.github.com): HTTP 200
✅ Blocked domain (example.com): blocked (403 via proxy)

Overall: PASS @lpcox

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

awmgmcpg
example.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"
    - "example.com"

See Network Configuration for more information.

🛡️ Egress verdict from Smoke Copilot Network Isolation
_{Add label ready-for-aw to run again}

github-actions · 2026-07-20T13:51:02Z

🔥 Smoke Test Results

Test	Result
GitHub MCP Connectivity	✅
GitHub.com HTTP	✅ 200
File Write/Read	⚠️ Template vars not expanded (pre-step data unavailable)

Overall: PASS — core engine connectivity verified.

cc @lpcox

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot
_{Add label ready-for-aw to run again}

github-actions · 2026-07-20T13:51:14Z

Smoke test results:

Last 2 merged PRs: ✅
GitHub title check: ✅
File write/read: ✅
Build: ✅
Overall status: PASS

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

awmgmcpg
registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex
_{Add label ready-for-aw to run again}

github-actions · 2026-07-20T13:51:15Z

Smoke Test: Copilot BYOK (Direct) Mode - PASS

✅ GitHub MCP Connectivity
✅ GitHub.com Connectivity (HTTP 200)
✅ File Write/Read
✅ BYOK Inference Path

Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY) via api-proxy → api.githubcopilot.com

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔑 BYOK report filed by Smoke Copilot BYOK
_{Add label ready-for-aw to run again}

github-actions · 2026-07-20T13:51:31Z

Smoke Test Results

MCP connectivity: ✅
GitHub.com HTTP: ✅
File I/O: ✅
BYOK inference: ✅
Running in direct BYOK mode (AWF_AUTH_TYPE=github-oidc + AWF_AUTH_AZURE_* + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw) authenticated via Microsoft Entra
@lpcox Overall: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🪪 BYOK (AOAI Entra) report filed by Smoke Copilot BYOK AOAI (Entra)
_{Add label ready-for-aw to run again}

github-actions · 2026-07-20T13:51:40Z

Smoke Test: Claude Engine Validation

Check	Result
API status	✅ PASS
gh check	✅ PASS
file status	✅ PASS

Overall result: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by Smoke Claude for #6414 · 55.7 AIC · ⊞ 3.3K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-07-20T13:52:05Z

Chroot Version Comparison ✅

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.13	Python 3.12.13	✅ YES
Node.js	v24.18.0	v24.18.0	✅ YES
Go	go1.22.12	go1.22.12	✅ YES

All runtimes match between host and chroot environments.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Tested by Smoke Chroot
_{Add label ready-for-aw to run again}

github-actions · 2026-07-20T13:52:15Z

Smoke Test: Copilot BYOK (Direct) Mode

✅ MCP tool skip (pre-fetched)
✅ GitHub.com connectivity
✅ File I/O test
✅ Direct BYOK inference test

Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw)

Overall: PASS
@lpcox

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔑 BYOK (AOAI api-key) report filed by Smoke Copilot BYOK AOAI (api-key)
_{Add label ready-for-aw to run again}

github-actions · 2026-07-20T13:52:19Z

Smoke Test: Copilot PAT Auth

Test	Result
GitHub MCP connectivity	✅ Reachable
GitHub.com HTTP	⚠️ Pre-step data unavailable
File write/read	⚠️ Pre-step data unavailable

Overall: PARTIAL — workflow template vars not expanded; pre-step outputs missing.

Auth mode: PAT (COPILOT_GITHUB_TOKEN) | @lpcox

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔑 PAT report filed by Smoke Copilot PAT
_{Add label ready-for-aw to run again}

github-actions · 2026-07-20T13:52:38Z

Smoke Test: Services Connectivity

Redis PING: ❌ (host.docker.internal name resolution failed)
PostgreSQL pg_isready: ❌ (no response)
PostgreSQL SELECT 1: ❌ (name resolution failed)

Overall: FAIL — Service containers unreachable (DNS + network unavailable in this sandbox).

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔌 Service connectivity validated by Smoke Services
_{Add label ready-for-aw to run again}

github-actions · 2026-07-20T13:52:43Z

Smoke Test Results\n- GitHub MCP: ❌ (Access Restricted)\n- GitHub Connectivity: ❌ (Status 000)\n- File Writing: ✅\n- Bash Tools: ✅\n\nOverall status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

💎 Faceted by Smoke Gemini
_{Add label ready-for-aw to run again}

github-actions · 2026-07-20T13:53:22Z

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	1/1 passed	✅ PASS
Go	env	✅	1/1 passed	✅ PASS
Go	uuid	✅	1/1 passed	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	all passed	✅ PASS
Node.js	execa	✅	all passed	✅ PASS
Node.js	p-limit	✅	all passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by Build Test Suite for #6414 · 33.5 AIC · ⊞ 7.1K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-07-20T13:53:39Z

Smoke Test: API Proxy OpenTelemetry Tracing

Scenario	Result
1. OTEL module loading	✅ `otel.js` loads; exports: `startRequestSpan`, `setTokenAttributes`, `setBudgetAttributes`, `endSpan`, `endSpanError`, `shutdown`, `isEnabled`, and helpers
2. Test suite	✅ 59 tests passed, 0 failures (2 suites: `otel.test.js`, `otel-fanout.test.js`)
3. OTEL env var forwarding	⚠️ `OTEL_EXPORTER_OTLP_ENDPOINT` / `GITHUB_AW_OTEL_TRACE_ID` not yet in `src/services/api-proxy-service.ts` — expected during development
4. Token-tracker `onUsage` hook	✅ `onUsage` callback present in `token-tracker-http.js`
5. OTEL span export	⚠️ No spans exported (no OTLP endpoint configured, file fallback not triggered) — expected in CI without a live api-proxy

Summary: Core OTEL implementation is healthy. Scenarios 3 and 5 are pending wiring — expected during active development.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

📡 OTel tracing validated by Smoke OTel Tracing
_{Add label ready-for-aw to run again}

github-actions · 2026-07-20T13:55:13Z

🔬 Smoke Test Results — Docker Sbx

Test	Status
GitHub MCP connectivity	⚠️ Filtered by secrecy policy
GitHub.com HTTP	⚠️ Template vars not substituted
File write/read	⚠️ Template vars not substituted

Overall: ⚠️ INCONCLUSIVE — Pre-computed step outputs were not substituted into the prompt (raw ${{ }} expressions received). Workflow template issue detected.

cc @lpcox

📰 BREAKING: Report filed by Smoke Docker Sbx
_{Add label ready-for-aw to run again}

github-actions Bot added ai-generated documentation Improvements or additions to documentation labels Jul 20, 2026

lpcox requested a review from Copilot July 20, 2026 05:35

Copilot started reviewing on behalf of lpcox July 20, 2026 05:36 View session

Copilot AI reviewed Jul 20, 2026

View reviewed changes

Comment thread docs/authentication-architecture.md Outdated

Potential fix for pull request finding

c966b73

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

lpcox added the ready-for-aw label Jul 20, 2026

lpcox temporarily deployed to aoai-model July 20, 2026 13:47 — with GitHub Actions Inactive

lpcox temporarily deployed to aoai-model July 20, 2026 13:50 — with GitHub Actions Inactive

github-actions Bot added the smoke-copilot-network-isolation Copilot network-isolation egress smoke test label Jul 20, 2026

github-actions Bot added the smoke-copilot label Jul 20, 2026

github-actions Bot added the smoke-codex label Jul 20, 2026

github-actions Bot added the smoke-copilot-byok label Jul 20, 2026

github-actions Bot added the smoke-copilot-byok-aoai-entra label Jul 20, 2026

lpcox temporarily deployed to aoai-model July 20, 2026 13:51 — with GitHub Actions Inactive

github-actions Bot added the smoke-claude label Jul 20, 2026

github-actions Bot added the smoke-chroot label Jul 20, 2026

github-actions Bot mentioned this pull request Jul 20, 2026

[aw] No-Op Runs #5883

Open

github-actions Bot added the smoke-copilot-byok-aoai-apikey label Jul 20, 2026

github-actions Bot added the build-test label Jul 20, 2026

lpcox merged commit 5893930 into main Jul 20, 2026
132 of 133 checks passed

lpcox deleted the docs/anthropic-auth-token-protection-57af5f4ff6f76bc9 branch July 20, 2026 14:54

This was referenced Jul 20, 2026

Internalize dead secureWipeFile export in SSL key storage #6428

Merged

Internalize dead sbx-manager exports #6429

Merged

Uh oh!

Conversation

github-actions Bot commented Jul 20, 2026

Summary

Background

Changes

Verification

Related

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Documentation Preview

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Review details

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026

🔥 Smoke Test Results

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

github-actions Bot commented Jul 20, 2026

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading

github-actions Bot commented Jul 20, 2026 •

edited

Loading