Problem
The Upload cache-memory data as artifact step in the workflow template uses path /tmp/gh-aw/cache-memory/., which actions/upload-artifact rejects with:
Relative pathing '.' and '..' is not allowed.
Evidence
Observed in Daily Caveman Optimizer run §25972743169. Surfaced in the 2026-05-16 audit-workflows report (discussion #32712) as a medium severity finding.
Fix
Change the workflow template (likely in pkg/workflow/* or a shared composite action) so the artifact path is /tmp/gh-aw/cache-memory/** or /tmp/gh-aw/cache-memory/*. Then recompile affected lock files.
Acceptance Criteria
Suggested Agent
Copilot — single-line workflow-template fix + lock-file regen.
Estimated Effort
< 1h
Source: DeepReport Intelligence Briefing 2026-05-17 — cross-referenced from Daily Audit (#32712).
Generated by 🔬 DeepReport - Intelligence Gathering Agent · ● 24.9M · ◷
Problem
The
Upload cache-memory data as artifactstep in the workflow template uses path/tmp/gh-aw/cache-memory/., whichactions/upload-artifactrejects with:Evidence
Observed in Daily Caveman Optimizer run §25972743169. Surfaced in the 2026-05-16 audit-workflows report (discussion #32712) as a
medium severityfinding.Fix
Change the workflow template (likely in
pkg/workflow/*or a shared composite action) so the artifact path is/tmp/gh-aw/cache-memory/**or/tmp/gh-aw/cache-memory/*. Then recompile affected lock files.Acceptance Criteria
/tmp/gh-aw/cache-memory/.Suggested Agent
Copilot — single-line workflow-template fix + lock-file regen.
Estimated Effort
< 1h
Source: DeepReport Intelligence Briefing 2026-05-17 — cross-referenced from Daily Audit (#32712).