github / github/copilot-sdk

[aw] Detection Runs

未关闭
#2,277 60 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
agentic-workflows
主要语言
Java
星标
10.5k
派生
1.5k
平均合并
1 天 14 小时
30 天内合并 PR
129

描述

This issue tracks all runs where threat detection flagged problems in agentic workflows in this repository. Each workflow run that completes with a detection warning or failure posts a comment here.

What is a Detection Problem?

A detection problem occurs when the threat detection system either:
- **Detects potential security threats** (prompt injection, secret leak, malicious patch)
- **Fails to produce results** (agent failure, parse error)

When `continue-on-error: true` (the default), these problems produce warnings and safe outputs still proceed. When `continue-on-error: false`, they block safe outputs entirely.

How This Helps

This issue helps you:
- Track workflows where threat detection raised concerns
- Review patterns of detection warnings or failures
- Identify false positives or recurring issues with threat detection
- Monitor the health of the threat detection system

Resources

- [GitHub Agentic Workflows Documentation](https://github.com/github/gh-aw)

> [!TIP]
> To configure threat detection behavior, update the frontmatter:
> ```yaml
> safe-outputs:
> threat-detection:
> continue-on-error: true # Warnings only (default)
> # continue-on-error: false # Strict mode — block safe outputs
> ```

---

> This issue is automatically managed by GitHub Agentic Workflows. Do not close this issue manually.
>
> **No action to take** - Do not assign to an agent.

> - [x] expires on Sep 5, 2026, 1:19 PM UTC

贡献指南

打开贡献指南

调研方向

这是一个为 GitHub Agentic Workflows 自动管理的 detection-runs 跟踪器。未指定任何文件或测试,并且 issue 明确说明无需采取任何操作,也不要将其分配给 agent;仅查看其评论中的检测警告或失败。

由索引模型根据 Issue 内容生成。

评估

技术栈
github-actions, yaml
领域
devops, security
Issue 类型
缺陷
难度
1/5
预计耗时
1 小时以内
活跃度
活跃
描述清晰度
描述清楚
新手友好度
1/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。