You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Migrate both workflows off engine: opencode now — they fail 100% of scheduled runs since the engine was removed.
Problem
daily-security-red-team.md and daily-reliability-review.md both declare engine: { id: opencode } (and import shared/opencode.md), but the opencode engine was removed as an intentional, already-shipped breaking change per CHANGELOG.md: "Removed the experimental opencode engine... Workflows using engine: opencode must migrate to copilot, claude, codex, gemini, antigravity, or pi. The runner no longer restores opencode.jsonc or .opencode/ configuration." Both workflows were never updated, so every job (agent, detection, evals) in both workflows now fails immediately at the "Verify OpenCode CLI installation" step.
Affected workflows and runs
.github/workflows/daily-reliability-review.md → daily-reliability-review.lock.yml — §31055598155, fails at "Verify OpenCode CLI installation" in all 3 jobs (agent, detection, evals)
.github/workflows/daily-security-red-team.md → daily-security-red-team.lock.yml — §31057366689, identical failure signature across all 3 jobs
Probable root cause
The runner no longer installs/restores the opencode CLI or its config directory, so the harness's "Verify OpenCode CLI installation" step fails immediately in every job of any workflow still declaring engine: { id: opencode }. These two workflows were missed when the engine was removed — issue #50531 (opencode compat audit) only covered external downstream repos lacking a migration codemod, not gh-aw's own scheduled workflows.
Proposed remediation
In both daily-reliability-review.md and daily-security-red-team.md, change engine: { id: opencode } to a supported engine (claude is the closest fit given existing prompt/tool conventions elsewhere in the repo).
Remove the - shared/opencode.md import from each file and add the equivalent shared config for the replacement engine.
Run gh aw compile to regenerate both .lock.yml files, then trigger a manual workflow_dispatch run of each to confirm the engine-installation step passes before the next scheduled trigger.
Warning
Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.
What happened
The threat detection engine failed to produce results.
Review the workflow run logs for details.
Migrate both workflows off
engine: opencodenow — they fail 100% of scheduled runs since the engine was removed.Problem
daily-security-red-team.mdanddaily-reliability-review.mdboth declareengine: { id: opencode }(and importshared/opencode.md), but theopencodeengine was removed as an intentional, already-shipped breaking change per CHANGELOG.md: "Removed the experimentalopencodeengine... Workflows usingengine: opencodemust migrate tocopilot,claude,codex,gemini,antigravity, orpi. The runner no longer restoresopencode.jsoncor.opencode/configuration." Both workflows were never updated, so every job (agent,detection,evals) in both workflows now fails immediately at the "Verify OpenCode CLI installation" step.Affected workflows and runs
.github/workflows/daily-reliability-review.md→daily-reliability-review.lock.yml— §31055598155, fails at "Verify OpenCode CLI installation" in all 3 jobs (agent,detection,evals).github/workflows/daily-security-red-team.md→daily-security-red-team.lock.yml— §31057366689, identical failure signature across all 3 jobsProbable root cause
The runner no longer installs/restores the
opencodeCLI or its config directory, so the harness's "Verify OpenCode CLI installation" step fails immediately in every job of any workflow still declaringengine: { id: opencode }. These two workflows were missed when the engine was removed — issue #50531 (opencode compat audit) only covered external downstream repos lacking a migration codemod, not gh-aw's own scheduled workflows.Proposed remediation
daily-reliability-review.mdanddaily-security-red-team.md, changeengine: { id: opencode }to a supported engine (claudeis the closest fit given existing prompt/tool conventions elsewhere in the repo).- shared/opencode.mdimport from each file and add the equivalent shared config for the replacement engine.gh aw compileto regenerate both.lock.ymlfiles, then trigger a manualworkflow_dispatchrun of each to confirm the engine-installation step passes before the next scheduled trigger.Success criteria
grep -rl opencode .github/workflows/daily-reliability-review.lock.yml .github/workflows/daily-security-red-team.lock.ymlreturns nothing.agent,detection, andevalsjobs without an engine-installation failure.Parent: #50734
Related to #50734