[detection-analysis] Detection Analysis Report — 2026-08-18 #53851
Closed
Replies: 1 comment
|
This discussion has been marked as outdated by Detection Analysis Report. A newer discussion is available at Discussion #54091. |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Summary
Warning
2 workflows with meaningful run volume have
gh-aw-detectiondisabled/absent despite definingsafe-outputs.Comparison Chart
Misconfigured Workflows
features:\n gh-aw-detection: trueto.github/workflows/squad.md— it definessafe-outputsand runs repeatedly viaworkflow_dispatchfan-out. Example run: §32133947135features:\n gh-aw-detection: trueto.github/workflows/squad-implement-worker.md— it definessafe-outputsand is invoked frequently as the Squad orchestrator's sub-agent. Example run: §32160700508No matches were found for keyword-based (rule 2), detection-step-failure (rule 3), or alternating-config (rule 4) misconfiguration patterns in this window — every keyword-matching workflow (audit/analyzer/report/detector/monitor/inspector) already had
gh-aw-detection: true, every run's threat-detection artifact was present regardless of overall job outcome, and no workflow name showed mixed detection settings across its runs.Daily Agentic Workflow AIC Usage Auditdid not run in this window; it remains excluded from rule 2 per its documented upstream-mirrored opt-out and was not evaluated further.View All Run Metrics
Aggregate:
Note: the detection-runs success rate is pulled down mainly by
PR Sous Chef(40 runs, 10% success) — a known chronic-failure workflow (seeagent-job-health.md), unrelated to the detection feature itself.Full per-workflow breakdown (80 distinct workflows):
View Historical Trend
No trend chart this run — this is the first recorded entry in the cache-memory trending history (
/tmp/gh-aw/cache-memory/trending/detection-metrics/history.jsonl). A 30-day trend chart will be generated automatically once 7+ days of history have accumulated.Recommendations
gh-aw-detection: trueonsquad.mdandsquad-implement-worker.md— both producesafe-outputsand run frequently; leaving detection off skips prompt-injection scanning on their output.PR Sous Chefis failing in 90% of its runs (40 total) — this is a job-health issue, not a detection misconfiguration, but it's worth tracking since it dominates the "detection" cohort's token and failure totals.References:
All reactions