apache / apache/cloudstack

[aw] Detection Runs

未关闭
#13,879 19 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
agentic-workflows
主要语言
Java
星标
3.1k
派生
1.4k
平均合并
6 天 19 小时
30 天内合并 PR
32

描述

This issue tracks all runs where threat detection flagged problems in agentic workflows in this repository. Each workflow run that completes with a detection warning or failure posts a comment here.

What is a Detection Problem?

A detection problem occurs when the threat detection system either:
- **Detects potential security threats** (prompt injection, secret leak, malicious patch)
- **Fails to produce results** (agent failure, parse error)

When `continue-on-error: true` (the default), these problems produce warnings and safe outputs still proceed. When `continue-on-error: false`, they block safe outputs entirely.

How This Helps

This issue helps you:
- Track workflows where threat detection raised concerns
- Review patterns of detection warnings or failures
- Identify false positives or recurring issues with threat detection
- Monitor the health of the threat detection system

Resources

- [GitHub Agentic Workflows Documentation](https://github.com/github/gh-aw)

> [!TIP]
> To configure threat detection behavior, update the frontmatter:
> ```yaml
> safe-outputs:
> threat-detection:
> continue-on-error: true # Warnings only (default)
> # continue-on-error: false # Strict mode — block safe outputs
> ```

---

> This issue is automatically managed by GitHub Agentic Workflows. Do not close this issue manually.
>
> **No action to take** - Do not assign to an agent.

> - [x] expires on Sep 13, 2026, 2:00 PM UTC

贡献指南

打开贡献指南

调研方向

这是一个自动管理的跟踪 issue,用于跟踪 agentic workflow 运行中的威胁检测警告和失败。它明确说明无需采取任何操作,也不要将其分配给 agent,因此对于贡献者来说,没有实现入口或完成测试。

由索引模型根据 Issue 内容生成。

评估

技术栈
github-actions
领域
ci-cd, security
Issue 类型
缺陷
难度
5/5
预计耗时
一周以上
活跃度
活跃
描述清晰度
需要澄清
新手友好度
1/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。