GitHub Agentic Workflows

Ephemerals

GitHub Agentic Workflows includes several features designed to automatically expire resources and reduce noise in your repositories. These “ephemeral” features help keep your repository clean by automatically cleaning up temporary issues, discussions, pull requests, and workflow runs after they’ve served their purpose.

Ephemerals control costs by stopping scheduled workflows at deadlines, reduce clutter by auto-expiring issues and discussions, keep status timelines clean by hiding older comments, and isolate automation via the SideRepoOps pattern.

Automatically disable workflow triggering after a deadline to control costs and prevent indefinite execution.

on: weekly on monday
stop-after: "+25h" # 25 hours from compilation time

Accepted formats:

  • Absolute dates: YYYY-MM-DD, MM/DD/YYYY, DD/MM/YYYY, January 2 2006, 1st June 2025, ISO 8601
  • Relative deltas: +7d, +25h, +1d12h30m (calculated from compilation time)

The minimum granularity is hours - minute-only units (e.g., +30m) are not allowed. Recompiling the workflow resets the stop time.

At the deadline, new runs are prevented while existing runs complete. The stop time persists through recompilation; use gh aw compile --refresh-stop-time to reset it. Common uses: trial periods, experimental features, orchestrated initiatives, and cost-controlled schedules.

See Triggers Reference for complete documentation.

Auto-close issues, discussions, and pull requests after a specified time period. This generates a maintenance workflow that runs automatically at appropriate intervals.

safe-outputs:
create-issue:
expires: 7 # Auto-close after 7 days
labels: [automation, agentic]
safe-outputs:
create-discussion:
expires: 3 # Auto-close after 3 days as "OUTDATED"
category: "general"
safe-outputs:
create-pull-request:
expires: 14 # Auto-close after 14 days (same-repo only)
draft: true

Supported formats:

  • Integer: Number of days (e.g., 7 = 7 days)
  • Relative time: 2h, 7d, 2w, 1m, 1y

Hours less than 24 are treated as 1 day minimum for expiration calculation.

Maintenance workflow frequency: The generated agentics-maintenance.yml workflow runs at the minimum required frequency based on the shortest expiration time across all workflows:

Shortest ExpirationMaintenance Frequency
1 day or lessEvery 2 hours
2 daysEvery 6 hours
3-4 daysEvery 12 hours
5+ daysDaily

Expiration markers: The system adds a visible checkbox line with an XML comment to the body of created items:

- [x] expires <!-- gh-aw-expires: 2026-01-14T15:30:00.000Z --> on Jan 14, 2026, 3:30 PM UTC

The maintenance workflow searches for items with this expiration format (checked checkbox with the XML comment) and automatically closes them with appropriate comments and resolution reasons. Users can uncheck the checkbox to prevent automatic expiration.

See Safe Outputs Reference for complete documentation.

The maintenance workflow automatically cleans up outdated cache-memory entries on every scheduled run. Cache keys follow the pattern memory-{workflow}-{run-id}, and the cleanup job groups caches by workflow prefix, keeps the latest run ID per group, and deletes older entries. This prevents cache storage from growing unboundedly as workflows run repeatedly.

The cleanup includes rate-limit awareness — it pauses early if the GitHub API rate limit is running low — and produces a job summary table showing how many caches were found, kept, and deleted.

You can also trigger cleanup manually using the clean_cache_memories operation (see Manual maintenance operations below).

The generated agentics-maintenance.yml workflow supports manual bulk operations via workflow_dispatch. Admin or maintainer users can trigger operations from the GitHub Actions UI or the CLI. All operations are restricted to admin and maintainer roles and are not available on forks.

Available operations:

OperationDescription
disableDisable all agentic workflows in the repository
enableRe-enable all agentic workflows in the repository
updateRecompile workflows and create a PR if files changed
upgradeUpgrade agentic workflows to the latest version and create a PR if files changed
safe_outputsReplay safe outputs from a specific workflow run (requires a run URL or run ID)
create_labelsCreate any repository labels referenced in safe-outputs that do not yet exist
clean_cache_memoriesClean up outdated cache-memory entries (same as the automated scheduled cleanup)
validateRun full workflow validation with all linters and file an issue if findings are detected
activity_reportGenerate a repository activity report for the last 24 hours, week, and month, and create an issue with the results

Operation details:

  • update / upgrade: Runs gh aw update or gh aw upgrade, stages changed files, and opens a pull request for review. After merging, recompile lock files with gh aw compile. See Upgrading Agentic Workflows for the manual upgrade process.
  • safe_outputs: Replays safe output processing from a previous workflow run. Provide a run URL or numeric run ID in the run_url input field. Useful when safe outputs were not applied correctly on the original run.
  • create_labels: Runs gh aw compile --json --no-emit, collects all unique label names across workflows, and creates missing ones with deterministic pastel colors. Requires issues: write permission.
  • validate: Runs gh aw compile --validate --no-emit --zizmor --actionlint --poutine --verbose. If errors or warnings are found, creates or updates a GitHub issue titled [aw] workflow validation findings with the full output.
  • clean_cache_memories: Lists all caches with the memory- prefix, groups them by workflow, keeps the latest per group, and deletes older entries.
  • activity_report: Runs gh aw logs --format markdown for the last 24 hours, 7 days, and 30 days (up to 1000 runs each), then creates an issue titled [aw] agentic status report with all three time-range sections as collapsible <details> blocks. Downloaded logs are cached under ./.cache/gh-aw/activity-report-logs. The job has a 2-hour timeout and skips the 30-day query when the GitHub API is rate-limited.

You can customize the maintenance workflow runner or disable maintenance entirely using the aw.json configuration file at .github/workflows/aw.json.

Customize the runner:

{
"maintenance": {
"runs_on": "ubuntu-latest",
"action_failure_issue_expires": 72
}
}

The runs_on field accepts a single string or an array of strings for multi-label runners (e.g., ["self-hosted", "linux"]). The default runner is ubuntu-slim.

The action_failure_issue_expires field controls expiration (in hours) for failure issues opened by the conclusion job (including grouped parent issues when group-reports: true). The default is 168 (7 days).

See Self-Hosted Runners for more details.

Disable maintenance entirely:

{
"maintenance": false
}

When maintenance is disabled, the compiler deletes any existing agentics-maintenance.yml file and emits a warning for workflows that use the expires field, since expiration depends on the maintenance workflow to run.

Automatically close older issues with the same workflow-id marker when creating new ones. This keeps your issues focused on the latest information.

safe-outputs:
create-issue:
close-older-issues: true # Close previous reports

When a new issue is created, up to 10 older issues with the same workflow-id marker are closed as “not planned” with a comment linking to the new issue. Requires GH_AW_WORKFLOW_ID to be set and appropriate repository permissions. Ideal for weekly reports and recurring analyses where only the latest result matters.

Minimize previous comments from the same workflow before posting new ones. Useful for status update workflows where only the latest information matters.

safe-outputs:
add-comment:
hide-older-comments: true
allowed-reasons: [outdated] # Optional: restrict hiding reasons

Before posting, the system finds and minimizes previous comments from the same workflow (identified by GITHUB_WORKFLOW). Comments are hidden, not deleted. Use allowed-reasons to restrict which minimization reason is applied: spam, abuse, off_topic, outdated (default), resolved, or low_quality. Useful for status updates, build notifications, and health checks where only the latest result matters.

See Safe Outputs Reference for complete documentation.

Run agentic workflows from a separate “side” repository that targets your main codebase. This isolates AI-generated issues, comments, and workflow runs from your main repository, keeping automation infrastructure separate from production code.

See SideRepoOps for complete setup and usage documentation.

Control which GitHub repository references (#123, owner/repo#456) are allowed in workflow output text. When configured, references to unlisted repositories are escaped with backticks to prevent GitHub from creating timeline items.

safe-outputs:
allowed-github-references: [] # Escape all references
create-issue:
target-repo: "my-org/main-repo"

See Safe Outputs Reference for complete documentation.

For ephemeral content, use GitHub discussions instead of issues. Discussions are better suited for temporary content, questions, and updates that don’t require long-term tracking.

safe-outputs:
create-discussion:
category: "general"
expires: 7 # Auto-close after 7 days
close-older-discussions: true

Why discussions for ephemeral content?

FeatureIssuesDiscussions
PurposeLong-term trackingConversations & updates
SearchabilityHigh priority in searchLower search weight
Project boardsNative integrationLimited integration
Auto-closeSupported with maintenance workflowSupported with maintenance workflow
Timeline noiseCan clutter project trackingSeparate from development work

Ephemeral discussions work well for weekly reports, periodic analyses, temporary announcements, time-bound Q&A, and community updates.

Combining features:

safe-outputs:
create-discussion:
category: "Status Updates"
expires: 14 # Close after 2 weeks
close-older-discussions: true # Replace previous reports

This keeps the “Status Updates” category clean: previous reports are closed on creation and all discussions auto-close after 14 days.