Fix runtime-import path duplication when repo is named .github

[Copilot]

When compiling a workflow inside a repository literally named .github, the compiler incorrectly used the first /.github/ match in the absolute path (the repo directory itself) rather than the actual .github/workflows/ directory, producing duplicated paths like .github/.github/workflows/file.md in the compiled lock file.

Changes

• pkg/workflow/compiler_yaml.go: Replace strings.Index with strings.LastIndex when locating the /.github/ directory segment in the absolute markdown path — ensures the actual workflows directory is found regardless of what the repository is named.
• pkg/workflow/compiler_yaml_test.go: Add repo_named_dot_github case to TestRuntimeImportPathGitHubIO covering this scenario.

Before (repo named .github):

{{#runtime-import .github/.github/workflows/readme-pr-agent.md}}

After:

{{#runtime-import .github/workflows/readme-pr-agent.md}}

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://v-api-github-com.286600.xyz/graphql
  • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw GO111MODULE 64/bin/go git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
• https://v-api-github-com.286600.xyz/repos/actions/ai-inference/git/ref/tags/v1
  • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha GOMODCACHE go /usr/bin/git -json GO111MODULE 64/bin/go git conf�� user.email test@example.com /usr/bin/git npx prettier --cgit GOPROXY nch,headSha,disp--show-toplevel git (http block)
• https://v-api-github-com.286600.xyz/repos/actions/checkout/git/ref/tags/v3
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha -json GO111MODULE 1/x64/bin/node GOINSECURE GOMOD GOMODCACHE go -has�� ithub/workflows/auto-triage-issues.md GO111MODULE /usr/bin/gh GOINSECURE GOMOD GOMODCACHE gh (http block)
• https://v-api-github-com.286600.xyz/repos/actions/checkout/git/ref/tags/v5
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha GOMODCACHE node /usr/bin/git --check **/*.cjs 64/bin/go git rev-�� --show-toplevel tDxh6_4/9rUbv3kNTest User /usr/bin/infocmp -json GO111MODULE 64/bin/go infocmp (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --show-toplevel go /usr/bin/git -json GO111MODULE 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git -json GO111MODULE ache/go/1.25.0/x--show-toplevel git (http block)
• https://v-api-github-com.286600.xyz/repos/actions/checkout/git/ref/tags/v6
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha --get remote.origin.url /usr/bin/git -json GO111MODULE 64/bin/go git rev-�� --show-toplevel go ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -json GO111MODULE 64/bin/go ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha /tmp/gh-aw-test-runs/20260304-055111-27017/test-670971158 config .cfg remote.origin.urgit GO111MODULE 64/bin/go git init�� GOMODCACHE go ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -json GO111MODULE At,event,headBra--show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha --show-toplevel go /usr/bin/git -json GO111MODULE 64/bin/go git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE ache/go/1.25.0/x--show-toplevel git (http block)
• https://v-api-github-com.286600.xyz/repos/actions/download-artifact/git/ref/tags/v8
  • Triggering command: /usr/bin/gh gh api /repos/actions/download-artifact/git/ref/tags/v8 --jq .object.sha -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env 5111-27017/test-398543963/.github/workflows GO111MODULE .cfg GOINSECURE GOMOD GOMODCACHE go (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/download-artifact/git/ref/tags/v8 --jq .object.sha 5111-27017/test-2667673093 GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 1/x64/bin/node GOINSECURE GOMOD GOMODCACHE go (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/download-artifact/git/ref/tags/v8 --jq .object.sha 429894703/001 GO111MODULE ache/go/1.25.0/x64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/x64/pkg/tool/linux_amd64/compile env 2242083/b416/_pkg_.a GO111MODULE 2242083/b416=> GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/actions/github-script/git/ref/tags/v8
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha GOSUMDB GOWORK 64/bin/go GOINSECURE GOMOD GOMODCACHE go env ck 'scripts/**/*GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha go1.25.0 -c=4 -nolocalimports -importcfg /tmp/go-build1122242083/b395/importcfg -pack /tmp/go-build1122242083/b395/_testmain.go env 3076424/b420/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha 0f55e27262bd1208GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD erignore go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/actions/setup-go/git/ref/tags/v4
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha --show-toplevel go /usr/bin/git -json GO111MODULE 64/bin/go git conf�� user.name Test User e/git-remote-https -json GO111MODULE 64/bin/go e/git-remote-https (http block)
• https://v-api-github-com.286600.xyz/repos/actions/setup-node/git/ref/tags/v4
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha k/gh-aw/gh-aw/.github/workflows/agent-performance-analyzer.md config /usr/bin/git remote.origin.urgit GO111MODULE 64/bin/go git conf�� --get remote.origin.url /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
• https://v-api-github-com.286600.xyz/repos/actions/upload-artifact/git/ref/tags/v4
  • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq .object.sha 2242083/b392/constants.test .cfg 2242083/b392/importcfg.link GOINSECURE GOMOD GOMODCACHE xz0Q0X6nB667n/NHxBBXcXKPe3uj3lr8NB/VEeUdPO-3zV62test@example.com env ry=1 GO111MODULE ache/node/24.13.1/x64/bin/node GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/actions/upload-artifact/git/ref/tags/v7
  • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v7 --jq .object.sha -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v7 --jq .object.sha -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v7 --jq .object.sha -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/github/gh-aw/actions/runs/1/artifacts
  • Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/github/gh-aw/actions/runs/12345/artifacts
  • Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/github/gh-aw/actions/runs/12346/artifacts
  • Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/github/gh-aw/actions/runs/2/artifacts
  • Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/github/gh-aw/actions/runs/3/artifacts
  • Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/github/gh-aw/actions/runs/4/artifacts
  • Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/github/gh-aw/actions/runs/5/artifacts
  • Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/github/gh-aw/actions/workflows
  • Triggering command: /usr/bin/gh gh workflow list --json name,state,path heck '**/*.cjs' GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go m/_n�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 GOMOD GOMODCACHE o fix."; \ exitGOPROXY env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE node (http block)
  • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 GOMOD GOMODCACHE OhGqih4/C5EvyQA3rev-parse env ty-test.md GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/github/gh-aw/git/ref/tags/v1.0.0
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/github/gh-aw/git/ref/tags/v1.2.3
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq .object.sha 3076424/b368/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env nUWJ/xTaYo1dcRas-errorsas GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 3076424/b368/imprev-parse (http block)
• https://v-api-github-com.286600.xyz/repos/github/gh-aw/git/ref/tags/v2.0.0
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha 3076424/b338/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE b/gh-aw/pkg/work-atomic GOMODCACHE go env WX5D/D_zs0sjmNNz-errorsas GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 3076424/b338/imp-tests (http block)
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha 3076424/b387/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE bracelet/x/exp/g-o GOMODCACHE go env LKMt/TwHi_itfwfB-p GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 3076424/b387/imp-goversion (http block)
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha 3076424/b404/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE b/gh-aw/pkg/repo-atomic GOMODCACHE go env 43Mi/COIMEuM4xQI-errorsas GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 3076424/b404/impconfig (http block)
• https://v-api-github-com.286600.xyz/repos/github/gh-aw/git/ref/tags/v3.0.0
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq .object.sha 3076424/b392/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE b/gh-aw/pkg/envu-atomic GOMODCACHE go env v2pU/RWquzQgp_1Y-errorsas GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 3076424/b392/impconfig (http block)
• https://v-api-github-com.286600.xyz/repos/nonexistent/action/git/ref/tags/v999.999.999
  • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha ty-test.md GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env 3091459801/.github/workflows GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/nonexistent/repo/actions/runs/12345
  • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE x_amd64/link env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE HC/wPHmRHH07drGotDxh6_4/9rUbv3kNTest User (http block)
• https://v-api-github-com.286600.xyz/repos/owner/repo/actions/workflows
  • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE erignore m/_n�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE erignore env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/owner/repo/contents/file.md
  • Triggering command: /tmp/go-build1122242083/b383/cli.test /tmp/go-build1122242083/b383/cli.test -test.testlogfile=/tmp/go-build1122242083/b383/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
• https://v-api-github-com.286600.xyz/repos/test-owner/test-repo/actions/secrets
  • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name heck '**/*.cjs' GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env ck 'scripts/**/*GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Bug: gh-aw compile incorrectly prepends repository name to #runtime-import paths in .github repositories</issue_title>
<issue_description>Description
The gh-aw compiler incorrectly prepends the repository name to local file paths within {{#runtime-import ...}} macros when compiling a shared workflow. Specifically, when compiling a workflow inside a centralized repository named .github, it changes the intended path from .github/workflows/readme-pr-agent.md to .github/.github/workflows/readme-pr-agent.md. This breaks the runtime import when a caller repository tries to execute the workflow, as the agent attempts to resolve a nested .github/.github directory that doesn't exist in the caller's workspace.

Reproduction
Workflow source (readme-pr-agent.md prior to compilation):
{{#runtime-import .github/workflows/readme-pr-agent.md}}

gh-aw version: v0.50.3
Steps:

1. Create a shared organizational repository literally named .github.
2. Place a workflow markdown file (e.g., readme-pr-agent.md) inside its .github/workflows/ directory.
3. Run gh aw compile .github/workflows/readme-pr-agent.md from within the .github repository.
4. Set up a different repository (the caller) to trigger this shared workflow via workflow_call.
5. Trigger the workflow via a PR in the caller repository.
6. The activation job fails during the "Interpolate variables and render templates" step because it is searching for the duplicated path.

Evidence from logs
From the activation job of the failed run:
ERR_API: Failed to process runtime import for .github/.github/workflows/readme-pr-agent.md: ERR_SYSTEM: Runtime import file not found: .github/workflows/readme-pr-agent.md

Suspected root cause
The compiler appears to be resolving the {{#runtime-import}} path relative to the shared repository's root directory and erroneously injecting the repository's name into the compiled output.

Because the shared repository happens to be named .github, the compiler outputs .github/.github/.... If I had compiled this exact same workflow file inside a repository named <enterprise-name>, it would have compiled the macro as {{#runtime-import .github/workflows/readme-pr-agent.md}}. The compiler should not be injecting the source repository's name into a local runtime import that is meant to be resolved in the calling repository's workspace.

File Details
Looking directly at the compiled readme-pr-agent.lock.yml file, the compiler clearly altered the macro and propagated the duplicated folder structure into the bash script:

GH_AW_PROMPT_EOF
cat << 'GH_AW_PROMPT_EOF'
{{#runtime-import .github/.github/workflows/readme-pr-agent.md}}
GH_AW_PROMPT_EOF
} > "$GH_AW_PROMPT"

Expected behavior
When compiling a workflow, local paths inside {{#runtime-import ...}} should be left intact (e.g., {{#runtime-import .github/workflows/readme-pr-agent.md}}) so that they correctly resolve against the root of the caller repository at runtime, regardless of what the shared template repository is named.

Environment

• gh-aw: v0.50.3
• Repo: private enterprise repo (shared repo specifically named .github)
• Engine: copilot</issue_description>

Comments on the Issue (you are @copilot in this section)

Custom agent used: agentic-workflows
GitHub Agentic Workflows (gh-aw) - Create, debug, and upgrade AI-powered workflows with intelligent prompt routing

• Fixes Bug: gh-aw compile incorrectly prepends repository name to #runtime-import paths in .github repositories #19500

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

[Copilot]

Pull request overview

Fixes incorrect {{#runtime-import ...}} path generation when compiling workflows inside a repository literally named .github, which previously could produce duplicated .github/.github/... paths in lock files.

Changes:

• Update runtime-import path derivation to use strings.LastIndex when locating the /.github/ directory segment in the absolute markdown path.
• Add a regression test case for repositories named .github to ensure runtime-import paths are not duplicated.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
pkg/workflow/compiler_yaml.go	Uses LastIndex to select the correct /.github/ segment (the workflows directory) when building the runtime-import path.
pkg/workflow/compiler_yaml_test.go	Adds coverage for the .github-named repository scenario to prevent .github/.github/... regressions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.