From 94898c6bf871e0154c7e2039333c584e1884d3ec Mon Sep 17 00:00:00 2001
From: Copilot <198982749+Copilot@users.noreply.github.com>
Date: Sat, 10 Jan 2026 19:45:25 -0800
Subject: [PATCH] Fix agentics-maintenance.yml: use pre-built gh-aw binary
 instead of building from source (#8147)

* Initial plan

* Fix agentics-maintenance.yml: Replace Go build with pre-built binary installation

Co-authored-by: NikolajBjorner <3085284+NikolajBjorner@users.noreply.github.com>

* Pin gh-aw installation script to v0.36.0 commit hash for security

Co-authored-by: NikolajBjorner <3085284+NikolajBjorner@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: NikolajBjorner <3085284+NikolajBjorner@users.noreply.github.com>
---
 .github/workflows/agentics-maintenance.yml | 28 ++++++++--------------
 1 file changed, 10 insertions(+), 18 deletions(-)

diff --git a/.github/workflows/agentics-maintenance.yml b/.github/workflows/agentics-maintenance.yml
index c6af7315a..d9371fb26 100644
--- a/.github/workflows/agentics-maintenance.yml
+++ b/.github/workflows/agentics-maintenance.yml
@@ -91,18 +91,14 @@ jobs:
           persist-credentials: false
 
 
-      - name: Setup Go
-        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
-        with:
-          go-version-file: go.mod
-          cache: true
-
-      - name: Build gh-aw
-        run: make build
+      - name: Install gh-aw
+        run: |
+          curl -fsSL https://raw.githubusercontent.com/githubnext/gh-aw/329844a/install-gh-aw.sh | bash
+          echo "$HOME/.local/bin" >> $GITHUB_PATH
 
       - name: Compile workflows
         run: |
-          ./gh-aw compile --validate --verbose
+          gh-aw compile --validate --verbose
           echo "✓ All workflows compiled successfully"
 
       - name: Setup Scripts
@@ -128,16 +124,12 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - name: Setup Go
-        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
-        with:
-          go-version-file: go.mod
-          cache: true
-
-      - name: Build gh-aw
-        run: make build
+      - name: Install gh-aw
+        run: |
+          curl -fsSL https://raw.githubusercontent.com/githubnext/gh-aw/329844a/install-gh-aw.sh | bash
+          echo "$HOME/.local/bin" >> $GITHUB_PATH
 
       - name: Run zizmor security scanner
         run: |
-          ./gh-aw compile --zizmor --verbose
+          gh-aw compile --zizmor --verbose
           echo "✓ Zizmor security scan completed"