issue-arborist: extract github.repository from shell script into step env

[Copilot]

gh aw compile --strict was repeatedly warning on workflows/issue-arborist.md because ${{ github.repository }} was interpolated directly inside a run: shell command. This change applies the compiler’s own hardening pattern in source so compile output is stable and shell-safe.

• Problem

  • Fetch issues data used expression interpolation inside run:, triggering shell-injection hardening warnings on every compile.

• Change

  • Added a step-scoped env binding:
    • GH_AW_GITHUB_REPOSITORY: ${{ github.repository }}
  • Switched the gh issue list invocation to use quoted env expansion:
    • --repo "$GH_AW_GITHUB_REPOSITORY"

• Result

  • Aligns source workflow with gh aw strict guidance (no ${{ }} interpolation inside shell script bodies).
  • Removes recurring auto-rewrite/warning behavior for this step.

- name: Fetch issues data
  env:
    GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
    GH_AW_GITHUB_REPOSITORY: ${{ github.repository }}
  run: |
    gh issue list --repo "$GH_AW_GITHUB_REPOSITORY" \
      --search "-parent-issue:*" \
      --state open \
      ...

[albertoblue87-netizen]

Hecho