GitHub Agentic Workflows let you write a repository automation as a Markdown file with YAML frontmatter and compile it with gh aw compile into a standard .lock.yml Actions workflow that runs a coding agent. GitHub made it generally available on October 28, 2026; the agent job is read-only by default, and every write goes through a separate safe-output job with its own scoped permissions.

The compile path. The frontmatter becomes the lock file; the Markdown body is loaded at run time.

The pitch is that some repository chores need judgment rather than a script: triaging an issue, investigating a red build, keeping docs in step. gh aw keeps those in Actions, with Actions' triggers, runners and logs, and adds the parts an agent needs: an engine, a firewall, and a way to write to GitHub without handing the model a write token.

GitHub's own framing is that it complements CI rather than replacing it: builds, tests and deployments stay deterministic.…