gh-aw

GitHub Agentic Workflows (gh-aw) is a GitHub CLI extension written in Go that lets developers write automation workflows in plain natural language Markdown and execute them inside GitHub Actions. Workflows are authored as `.md` files, and the extension supports four AI backends: GitHub Copilot, Claude (Anthropic), Codex (OpenAI), and Gemini (Google), meaning teams can route work to whichever provider they already have access to, including Claude Code. The tool integrates directly with the GitHub Actions runner environment rather than requiring a separate infrastructure setup. A notable aspect is its layered safety architecture: workflows default to read-only repository permissions, write operations are only permitted through sanitized `safe-outputs`, and the system enforces sandboxed execution, network isolation, SHA-pinned supply chain dependencies, tool allow-listing, and optional human approval gates before critical operations proceed. The primary audience is software engineering teams that want to automate repository tasks such as code review, triage, or CI steps through AI agents while maintaining audit-friendly, security-conscious controls.

What people ask about gh-aw