Viewing enriched Twitter post
If you're building with GitHub Agentic Workflows, security is baked into the foundation. 🔐 The architecture is set up around three core principles: 🛡️ Isolation 🛡️ Constrained outputs 🛡️ Comprehensive logging Here's how we engineered it to be secure by design from day one. ⬇️ https://t.co/tmJDgqlIJi
{
"media": [
{
"type": "photo",
"url": "https://crmoxkoizveukayfjuyo.supabase.co/storage/v1/object/public/media/posts/2039420064986698225/media_0.jpg",
"filename": "media_0.jpg"
},
{
"type": "photo",
"url": "https://crmoxkoizveukayfjuyo.supabase.co/storage/v1/object/public/media/posts/2039420064986698225/media_1.png",
"filename": "media_1.png"
}
],
"processed_at": "2026-04-01T19:20:18.381060",
"pipeline_version": "2.0"
}{
"type": "tweet",
"id": "2039420064986698225",
"url": "https://x.com/github/status/2039420064986698225",
"twitterUrl": "https://twitter.com/github/status/2039420064986698225",
"text": "If you're building with GitHub Agentic Workflows, security is baked into the foundation. 🔐\n\nThe architecture is set up around three core principles:\n🛡️ Isolation\n🛡️ Constrained outputs\n🛡️ Comprehensive logging\n\nHere's how we engineered it to be secure by design from day one. ⬇️\nhttps://t.co/tmJDgqlIJi",
"source": "Twitter for iPhone",
"retweetCount": 2,
"replyCount": 2,
"likeCount": 15,
"quoteCount": 0,
"viewCount": 1851,
"createdAt": "Wed Apr 01 19:10:08 +0000 2026",
"lang": "en",
"bookmarkCount": 3,
"isReply": false,
"inReplyToId": null,
"conversationId": "2039420064986698225",
"displayTextRange": [
0,
278
],
"inReplyToUserId": null,
"inReplyToUsername": null,
"author": {
"type": "user",
"userName": "github",
"url": "https://x.com/github",
"twitterUrl": "https://twitter.com/github",
"id": "13334762",
"name": "GitHub",
"isVerified": false,
"isBlueVerified": true,
"verifiedType": "Business",
"profilePicture": "https://pbs.twimg.com/profile_images/1633247750010830848/8zfRrYjA_normal.png",
"coverPicture": "https://pbs.twimg.com/profile_banners/13334762/1765308302",
"description": "",
"location": "San Francisco, CA",
"followers": 2627078,
"following": 334,
"status": "",
"canDm": true,
"canMediaTag": true,
"createdAt": "Mon Feb 11 04:41:50 +0000 2008",
"entities": {
"description": {
"urls": []
},
"url": {}
},
"fastFollowersCount": 0,
"favouritesCount": 8670,
"hasCustomTimelines": true,
"isTranslator": false,
"mediaCount": 2939,
"statusesCount": 10463,
"withheldInCountries": [],
"affiliatesHighlightedLabel": {},
"possiblySensitive": false,
"pinnedTweetIds": [
"2019093909981257849"
],
"profile_bio": {
"description": "The AI-powered developer platform to build, scale, and deliver secure software.",
"entities": {
"description": {
"hashtags": [],
"symbols": [],
"urls": [],
"user_mentions": []
},
"url": {
"urls": [
{
"display_url": "github.com",
"expanded_url": "http://github.com",
"indices": [
0,
23
],
"url": "https://t.co/bbJgfyzKzp"
}
]
}
}
},
"isAutomated": false,
"automatedBy": null
},
"extendedEntities": {
"media": [
{
"display_url": "pic.twitter.com/PsPFpmR1rW",
"expanded_url": "https://twitter.com/github/status/2039420064986698225/photo/1",
"ext_alt_text": "A diagram illustrating the three-layered security architecture of GitHub Agentic Workflows. From top to bottom: The Planning layer contains Safe Outputs MCP (GitHub write operations), Call filtering (Call availability, volume), and Output sanitization (Secret removal, moderation). The Configuration layer contains Compiler (GH AW extension), Firewall policies (Allowlist), and MCP config (Docker image, auth token). The Substrate layer contains Action runner VM (OS, Hypervisor), Docker containers (Docker daemon, network), and Trusted containers (Firewall, MCP Gateway, API proxy).",
"ext_media_availability": {
"status": "Available"
},
"features": {
"large": {
"faces": []
},
"orig": {
"faces": []
}
},
"id_str": "2039420043855839233",
"indices": [
279,
302
],
"media_key": "3_2039420043855839233",
"media_results": {
"id": "QXBpTWVkaWFSZXN1bHRzOgwAAQoAARxNebl91sABCgACHE15vmlWEfEAAA==",
"result": {
"__typename": "ApiMedia",
"id": "QXBpTWVkaWE6DAABCgABHE15uX3WwAEKAAIcTXm+aVYR8QAA",
"media_key": "3_2039420043855839233"
}
},
"media_url_https": "https://pbs.twimg.com/media/HE15uX3WwAEpGie.jpg",
"original_info": {
"focus_rects": [
{
"h": 860,
"w": 1536,
"x": 0,
"y": 146
},
{
"h": 1423,
"w": 1423,
"x": 57,
"y": 0
},
{
"h": 1423,
"w": 1248,
"x": 144,
"y": 0
},
{
"h": 1423,
"w": 712,
"x": 412,
"y": 0
},
{
"h": 1423,
"w": 1536,
"x": 0,
"y": 0
}
],
"height": 1423,
"width": 1536
},
"sizes": {
"large": {
"h": 1423,
"w": 1536
}
},
"type": "photo",
"url": "https://t.co/PsPFpmR1rW"
}
]
},
"card": null,
"place": {},
"entities": {
"hashtags": [],
"symbols": [],
"urls": [
{
"display_url": "github.blog/ai-and-ml/gene…",
"expanded_url": "https://github.blog/ai-and-ml/generative-ai/under-the-hood-security-architecture-of-github-agentic-workflows/",
"indices": [
279,
302
],
"url": "https://t.co/tmJDgqlIJi"
}
],
"user_mentions": []
},
"quoted_tweet": null,
"retweeted_tweet": null,
"isLimitedReply": false,
"article": null
}