Download Latest Version windows-amd64.exe (33.6 MB)
Email in envelope

Get an email when there's a new version of GitHub Agentic Workflows

Home / v0.85.4
Name Modified Size InfoDownloads / Week
Parent folder
windows-amd64.exe 2026-08-06 33.4 MB
0
windows-arm64.exe 2026-08-06 30.1 MB
0
linux-arm64 2026-08-06 29.8 MB
0
freebsd-arm64 2026-08-06 29.7 MB
0
gh-aw-wasm-v0.85.4.tar.gz 2026-08-06 6.2 MB
1 1 weekly downloads
linux-386 2026-08-06 31.2 MB
0
linux-amd64 2026-08-06 32.7 MB
0
linux-arm 2026-08-06 30.9 MB
0
freebsd-amd64 2026-08-06 32.6 MB
0
android-arm64 2026-08-06 32.4 MB
0
checksums.txt 2026-08-06 1.0 kB
0
darwin-amd64 2026-08-06 33.3 MB
0
darwin-arm64 2026-08-06 30.5 MB
0
freebsd-386 2026-08-06 31.0 MB
0
README.md 2026-08-06 4.9 kB
0
v0.85.4 source code.tar.gz 2026-08-06 248.4 MB
0
v0.85.4 source code.zip 2026-08-06 252.5 MB
0
Totals: 17 Items   884.7 MB 1

🌟 Release Highlights

This release is a major security-hardening pass — expanding secret masking across git, JavaScript runtimes, and MCP servers — alongside new automated audits, linter capabilities, and documentation improvements.

🔒 Security Hardening

  • Expanded secret masking coverage: git invocations in JS action scripts, derived secrets in JavaScript runtimes, authHeader values in git auth helpers, and API-derived OTLP access tokens are now automatically masked with core.setSecret, closing several avenues for accidental secret leakage in logs and artifacts.
  • MCP server secret protection: secret masking is now prevented from leaking through MCP servers, and safe-output artifacts no longer capture base64 CI trigger tokens or raw process stdout/stderr logs.
  • Zizmor CI gating: workflows now fail CI on high/critical severity Zizmor findings, and Zizmor now runs against all generated workflows in CI for continuous security scanning.

✨ What's New

  • Daily action/setup security audit with cache-memory aspect rotation to continuously check for supply-chain risk.
  • report-failed-jobs added to the safe-outputs JSON schema.
  • New linters: regexpdynamicpattern flags non-constant regexp compile patterns, and the errormessage linter gained a full-repo audit mode.
  • list_label MCP pagination now supports name filtering.
  • Custom engine execution steps now receive GH_AW_ENGINE_VERSION for better version-aware behavior.

🐛 Bug Fixes & Improvements

  • Fixed add_labels silently applying no labels.
  • Fixed container pin validation to correctly skip unpinned containers.
  • Fixed a fleet-wide smoke-test outage caused by a cli-proxy image tag mismatch.
  • Fixed trial not forwarding issue_number to workflows that don't declare it, and rendering the logical repo in the github-context prompt.
  • Fixed GITHUB_STEP_SUMMARY being unwritable in the AWF sandbox during threat detection (external detector bumped to v0.4.0).
  • Fixed detection-analysis-report timeouts and redundant log downloads.
  • compile no longer adds an ineffective merge=ours entry to the generated .gitattributes.
  • Retained jobs.*.permissions for built-in safe-outputs and conclusion jobs.

📚 Documentation

  • New guide documenting ARC and sandbox runtime architecture.
  • Refined homepage security features and highlighted self-hosted runners with microVM isolation.
  • Clarified that custom safe-output jobs run once per workflow run, not once per tool call.
  • Various self-healing documentation fixes and an unbloated "About" page.> Generated by 🚀 Release · auto · 18.4 AIC · ⊞ 11.2K

What's Changed

Full Changelog: https://github.com/github/gh-aw/compare/v0.85.3...v0.85.4

Source: README.md, updated 2026-08-06