apache / apache/cloudstack

[aw] Detection Runs

未關閉
#13,879 19 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
agentic-workflows
主要語言
Java
星號
3.1k
分支
1.4k
平均合併
6 天 19 小時
30 天內合併 PR
32

描述

This issue tracks all runs where threat detection flagged problems in agentic workflows in this repository. Each workflow run that completes with a detection warning or failure posts a comment here.

What is a Detection Problem?

A detection problem occurs when the threat detection system either:
- **Detects potential security threats** (prompt injection, secret leak, malicious patch)
- **Fails to produce results** (agent failure, parse error)

When `continue-on-error: true` (the default), these problems produce warnings and safe outputs still proceed. When `continue-on-error: false`, they block safe outputs entirely.

How This Helps

This issue helps you:
- Track workflows where threat detection raised concerns
- Review patterns of detection warnings or failures
- Identify false positives or recurring issues with threat detection
- Monitor the health of the threat detection system

Resources

- [GitHub Agentic Workflows Documentation](https://github.com/github/gh-aw)

> [!TIP]
> To configure threat detection behavior, update the frontmatter:
> ```yaml
> safe-outputs:
> threat-detection:
> continue-on-error: true # Warnings only (default)
> # continue-on-error: false # Strict mode — block safe outputs
> ```

---

> This issue is automatically managed by GitHub Agentic Workflows. Do not close this issue manually.
>
> **No action to take** - Do not assign to an agent.

> - [x] expires on Sep 13, 2026, 2:00 PM UTC

貢獻指南

開啟貢獻指南

研究方向

這是一個自動管理的追蹤 issue,用於追蹤 agentic workflow 執行中的威脅偵測警告和失敗。它明確說明無需採取任何行動,也不要將其指派給 agent,因此對貢獻者而言,沒有實作入口或完成測試。

由索引模型根據 Issue 內容生成。

評估

技術堆疊
github-actions
領域
ci-cd, security
Issue 類型
缺陷
難度
5/5
預估耗時
一週以上
活躍度
活躍
描述清晰度
需要釐清
新手友好度
1/100

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。