[detection-analysis] Detection Analysis Report — 2026-07-29 #49009
Closed
Replies: 1 comment
|
This discussion was automatically closed because it expired on 2026-08-01T23:45:07.538Z.
|
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Summary
2026-07-28T23:41:00Zto2026-07-29T23:41:00ZWarning
10 misconfigured workflow(s) detected — see details below.
Comparison Chart
Misconfigured Workflows
gh-aw-detection: truein frontmatter given this workflow's run frequency, to benefit from anomaly/prompt-injection detection.gh-aw-detection: truein frontmatter given this workflow's run frequency, to benefit from anomaly/prompt-injection detection.gh-aw-detection: truein frontmatter given this workflow's run frequency, to benefit from anomaly/prompt-injection detection.gh-aw-detection: truein frontmatter given this workflow's run frequency, to benefit from anomaly/prompt-injection detection.gh-aw-detection: truein frontmatter given this workflow's run frequency, to benefit from anomaly/prompt-injection detection.gh-aw-detection: truein frontmatter given this workflow's run frequency, to benefit from anomaly/prompt-injection detection.gh-aw-detection: truein frontmatter given this workflow's run frequency, to benefit from anomaly/prompt-injection detection.gh-aw-detection: trueto frontmatter, matching the monitoring/audit intent implied by the workflow name.gh-aw-detection: trueto frontmatter, matching the monitoring/audit intent implied by the workflow name.gh-aw-detection: trueto frontmatter, matching the monitoring/audit intent implied by the workflow name.Note: rule "gh-aw-detection: false with >3 runs" is specified against a 7-day window, but only the 24h log window was fetched for this report; the 24h run count was used as a conservative proxy.
Daily Agentic Workflow AIC Usage Auditwas excluded from the name-based check per its documented upstream opt-out.View All Run Metrics
View Historical Trend
27 days of history in cache-memory (
trending/detection-metrics/history.jsonl). Regular-run volume has grown sharply since mid-July while detection-enabled adoption has grown more slowly — detection coverage is currently ~32% of runs, down from the recent peak proportionally as regular-workflow volume outpaced it.Recommendations
gh-aw-detection: trueon the 7 high-frequency PR/issue-triggered workflows flagged above (PR Sous Chef, PR Code Quality Reviewer, Design Decision Gate, Impeccable Skills Reviewer, Matt Pocock Skills Reviewer, Issue Monster, PR Description Updater) — these process untrusted PR/issue content most frequently and benefit most from detection coverage.gh-aw-detection: trueunless there is a documented opt-out like the AIC Usage Audit workflow.--start-date -7dlog fetch when feasible to evaluate the frequency-based rule against its intended 7-day window rather than the 24h proxy used here.All reactions