Propagate context to external threat detection

[Copilot]

External threat-detect execution did not receive workflow context, custom prompts, or detection validation inputs, causing unnamed-workflow prompts and inconsistent strict-mode behavior.

• External detector environment

  • Adds WORKFLOW_NAME, WORKFLOW_DESCRIPTION, HAS_PATCH, and GH_AW_DETECTION_CONTINUE_ON_ERROR to the AWF execution step.
  • Adds CUSTOM_PROMPT only when configured.

• Safe prompt propagation

  • Uses step environment variables forwarded by AWF rather than embedding user-controlled prompt text in the command line.

• Shared rendering

  • Centralizes threat-detection context env generation so setup, external execution, and conclusion paths use consistent continue-on-error formatting.

env:
  WORKFLOW_NAME: "Example workflow"
  WORKFLOW_DESCRIPTION: "Reviews repository changes"
  HAS_PATCH: ${{ needs.agent.outputs.has_patch }}
  GH_AW_DETECTION_CONTINUE_ON_ERROR: "false"
  CUSTOM_PROMPT: "Prioritize credential exposure."

• Coverage and generated workflows
  • Adds compiler assertions for configured and omitted custom prompts.
  • Regenerates affected workflow lock files.

• Fixes threat-detection: workflow context and detection env vars never reach the external detector execution step #50649

[pelikhan]

@copilot resolve the merge conflicts on this branch.

[Copilot]

Pull request overview

Propagates workflow context and strict-mode inputs into external threat detection.

Changes:

• Adds shared threat-detection environment rendering.
• Adds compiler coverage for custom prompt propagation.
• Regenerates affected workflow lock files.

Show a summary per file

File	Description
pkg/workflow/threat_detection_test.go	Tests external detector context propagation.
pkg/workflow/threat_detection_steps.go	Centralizes detection environment rendering.
pkg/workflow/threat_detection_external.go	Adds context to the AWF execution environment.
.github/workflows/typist.lock.yml	Regenerates detector environment.
.github/workflows/prompt-clustering-analysis.lock.yml	Regenerates detector environment.
.github/workflows/github-mcp-structural-analysis.lock.yml	Regenerates detector environment.
.github/workflows/example-workflow-analyzer.lock.yml	Regenerates detector environment.
.github/workflows/duplicate-code-detector.lock.yml	Regenerates detector environment.
.github/workflows/detection-analysis-report.lock.yml	Regenerates detector environment.
.github/workflows/design-decision-gate.lock.yml	Regenerates detector environment.
.github/workflows/daily-token-consumption-report.lock.yml	Regenerates detector environment.
.github/workflows/daily-rendering-scripts-verifier.lock.yml	Regenerates detector environment.
.github/workflows/daily-reliability-review.lock.yml	Regenerates detector environment.
.github/workflows/daily-observability-report.lock.yml	Regenerates detector environment.
.github/workflows/daily-fact.lock.yml	Regenerates detector environment.
.github/workflows/daily-evals-report.lock.yml	Regenerates detector environment.
.github/workflows/daily-elixir-credo-snippet-audit.lock.yml	Regenerates detector environment.
.github/workflows/daily-doc-healer.lock.yml	Regenerates detector environment.
.github/workflows/daily-code-metrics.lock.yml	Regenerates detector environment.
.github/workflows/daily-choice-test.lock.yml	Regenerates detector environment.
.github/workflows/daily-caveman-optimizer.lock.yml	Regenerates detector environment.
.github/workflows/daily-cache-strategy-analyzer.lock.yml	Regenerates detector environment.
.github/workflows/daily-aw-cross-repo-compile-check.lock.yml	Regenerates detector environment.
.github/workflows/daily-astrostylelite-markdown-spellcheck.lock.yml	Regenerates detector environment.
.github/workflows/daily-agentrx-trace-optimizer.lock.yml	Regenerates detector environment.
.github/workflows/craft.lock.yml	Regenerates detector environment and step ordering.
.github/workflows/copilot-session-insights.lock.yml	Regenerates detector environment.
.github/workflows/copilot-agent-analysis.lock.yml	Regenerates detector environment.
.github/workflows/contribution-check.lock.yml	Regenerates detector environment and step ordering.
.github/workflows/cloclo.lock.yml	Regenerates detector environment.
.github/workflows/cli-version-checker.lock.yml	Regenerates detector environment.
.github/workflows/claude-code-user-docs-review.lock.yml	Regenerates detector environment.
.github/workflows/ci-doctor.lock.yml	Regenerates detector environment.
.github/workflows/ci-coach.lock.yml	Regenerates detector environment and step ordering.
.github/workflows/changeset.lock.yml	Regenerates detector environment.
.github/workflows/blog-auditor.lock.yml	Regenerates detector environment.
.github/workflows/aw-failure-investigator.lock.yml	Regenerates detector environment.
.github/workflows/avenger.lock.yml	Regenerates detector environment.
.github/workflows/audit-workflows.lock.yml	Regenerates detector environment.
.github/workflows/artifacts-summary.lock.yml	Regenerates detector environment and step ordering.
.github/workflows/archivx-agentic-workflows-analyzer.lock.yml	Regenerates detector environment.
.github/workflows/archie.lock.yml	Regenerates detector environment and step ordering.
.github/workflows/approach-validator.lock.yml	Regenerates detector environment.
.github/workflows/api-consumption-report.lock.yml	Regenerates detector environment.
.github/skills/agentic-workflows/SKILL.md	Adds the designer-mappings workflow reference.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 79/101 changed files
• Comments generated: 1
• Review effort level: Balanced

[Copilot]

@copilot resolve the merge conflicts on this branch.

Resolved in b67f4e7.

[gh-aw-bot]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

@copilot This PR is currently blocked by merge conflicts. Please run make merge-main on this branch to resolve conflicts, then continue with the pr-finisher skill and address the latest review thread: #50853 (comment)

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 12.5 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.86.0