github / github/gh-aw-threat-detection

[detection-stats] Detection stats for github/gh-aw - 2026-09-08

Open
#1,049 0 comments 0 reactions 0 assignees View on GitHub
automation detection-stats
Dominant language
Go
Stars
13
Forks
7
Avg merge
9h 52m
Merged PRs (30d)
25

Description

1377 external-detector runs analysed, detection-job error rate 0%, soft-failure count 120, threat rate 0% (of 273 runs with a verdict).

## Summary

# gh-aw detection statistics - 2026-09-08 (UTC)

Repository: `github/gh-aw`
Window: `2026-09-08T00:00:00Z` .. `2026-09-08T23:59:59Z`
API requests: 2433, rate-limit pauses: 1
Data complete: yes

## Totals

| Metric | Count |
|---|---|
| Workflow runs in window | 2398 |
| Agentic runs (`*.lock.yml`) | 1712 |
| Runs with a `detection` job | 1378 |
| ... using the external detector | 1377 |
| ... using the built-in detector | 1 |
| ... detector could not be determined | 0 |
| Agentic runs without a `detection` job | 334 |

All rates below are over the **external detector** population (1377 runs). Since gh-aw #54111 the external detector is the compile-time default; a run counts as external when its `detection` job showed the `Install threat-detect binary` step, when another run of the same workflow did that day, or when the workflow is `.lock.yml` and no run showed the built-in shape (a completed detection job with steps but no marker). Runs on a workflow that opted out with `features: gh-aw-detection: false` count as built-in.

## Detection job outcomes

| Outcome | Count | Rate |
|---|---|---|
| `skipped` | 972 | 70.59% |
| `success` | 401 | 29.12% |
| `cancelled` | 4 | 0.29% |

**Error rate (failure/timed_out/action_required): 0%**

## Verdict availability

| State | Meaning | Count |
|---|---|---|
| `present` | detection artifact downloaded and parsed | 273 |
| `absent` | detection job ran but published no artifact (soft failure) | 122 |
| `skipped` | detection job was skipped or was still running (nothing to fetch) | 972 |
| `unreadable` | artifact zip could not be unpacked | 10 |

Green detection jobs that published no verdict: **120** (detection steps are `continue-on-error`, so a missing verdict artifact is the only reliable signal for these).

## Detection results

| Result | Count |
|---|---|
| Runs with a parsed verdict | 273 |
| Clean (no threat) | 273 |
| Any threat | 0 |
| `prompt_injection` | 0 |
| `secret_leak` | 0 |
| `malicious_patch` | 0 |

**Threat rate (of runs with a verdict): 0%**

## By workflow

| Workflow | Runs | Failed | Cancelled | Skipped | No verdict | Threats |
|---|---|---|---|---|---|---|
| PR Sous Chef | 80 | 0 | 1 | 0 | 2 | 0 |
| Q | 62 | 0 | 0 | 62 | 0 | 0 |
| Daily Trajectory Grader Implementer | 47 | 0 | 0 | 47 | 0 | 0 |
| Issue Monster | 47 | 0 | 0 | 3 | 27 | 0 |
| [aw] Failure Investigator (6h) | 47 | 0 | 0 | 43 | 0 | 0 |
| Deployment Incident Monitor | 37 | 0 | 0 | 37 | 0 | 0 |
| Design Decision Gate 🏗️ | 29 | 0 | 0 | 17 | 0 | 0 |
| Avenger | 24 | 0 | 0 | 10 | 14 | 0 |
| Agent Container Smoke Test | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Agent: all/merged | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Agent: all/none | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Agent: public/approved | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Agent: public/none | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Agent: scoped/approved | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Aider | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Call Workflow | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Checkout PR Dispatch | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Claude | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Codex | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Copilot ARM64 | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Copilot Auto | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Create Cross-Repo PR | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Crush | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke Cursor | 22 | 0 | 0 | 22 | 0 | 0 |
| Smoke DeepSeek Harness | 22 | 0 | 0 | 22 | 0 | 0 |

_240 further workflows omitted; see `stats.json`._

## Notable runs

| Workflow | Run | Job conclusion | Verdict | Threats | Reported reason |
|---|---|---|---|---|---|
| Agent Job Health Monitor | [34290001576](https://github.com/github/gh-aw/actions/runs/34290001576) | `success` | `absent` | - | `-` |
| Agent Persona Explorer | [34245367924](https://github.com/github/gh-aw/actions/runs/34245367924) | `success` | `absent` | - | `-` |
| Agentic Workflow Audit Agent | [34279703879](https://github.com/github/gh-aw/actions/runs/34279703879) | `success` | `absent` | - | `-` |
| Architecture Guardian | [34237897061](https://github.com/github/gh-aw/actions/runs/34237897061) | `success` | `absent` | - | `-` |
| Auto-Triage Issues | [34175006930](https://github.com/github/gh-aw/actions/runs/34175006930) | `success` | `absent` | - | `-` |
| Auto-Triage Issues | [34195408923](https://github.com/github/gh-aw/actions/runs/34195408923) | `success` | `absent` | - | `-` |
| Auto-Triage Issues | [34198023350](https://github.com/github/gh-aw/actions/runs/34198023350) | `success` | `absent` | - | `-` |
| Auto-Triage Issues | [34200854630](https://github.com/github/gh-aw/actions/runs/34200854630) | `success` | `absent` | - | `-` |
| Auto-Triage Issues | [34226750102](https://github.com/github/gh-aw/actions/runs/34226750102) | `success` | `absent` | - | `-` |
| Auto-Triage Issues | [34263202221](https://github.com/github/gh-aw/actions/runs/34263202221) | `success` | `absent` | - | `-` |
| Auto-Triage Issues | [34265943368](https://github.com/github/gh-aw/actions/runs/34265943368) | `success` | `absent` | - | `-` |
| Avenger | [34180660076](https://github.com/github/gh-aw/actions/runs/34180660076) | `success` | `absent` | - | `-` |
| Avenger | [34183964811](https://github.com/github/gh-aw/actions/runs/34183964811) | `success` | `absent` | - | `-` |
| Avenger | [34187416387](https://github.com/github/gh-aw/actions/runs/34187416387) | `success` | `absent` | - | `-` |
| Avenger | [34190929973](https://github.com/github/gh-aw/actions/runs/34190929973) | `success` | `absent` | - | `-` |
| Avenger | [34196021660](https://github.com/github/gh-aw/actions/runs/34196021660) | `success` | `absent` | - | `-` |
| Avenger | [34210542675](https://github.com/github/gh-aw/actions/runs/34210542675) | `success` | `absent` | - | `-` |
| Avenger | [34220934990](https://github.com/github/gh-aw/actions/runs/34220934990) | `success` | `absent` | - | `-` |
| Avenger | [34227450998](https://github.com/github/gh-aw/actions/runs/34227450998) | `success` | `absent` | - | `-` |
| Avenger | [34232428320](https://github.com/github/gh-aw/actions/runs/34232428320) | `success` | `absent` | - | `-` |
| Avenger | [34257352015](https://github.com/github/gh-aw/actions/runs/34257352015) | `success` | `absent` | - | `-` |
| Avenger | [34263974855](https://github.com/github/gh-aw/actions/runs/34263974855) | `success` | `absent` | - | `-` |
| Avenger | [34269144082](https://github.com/github/gh-aw/actions/runs/34269144082) | `success` | `absent` | - | `-` |
| Avenger | [34280682697](https://github.com/github/gh-aw/actions/runs/34280682697) | `success` | `absent` | - | `-` |
| Avenger | [34286112622](https://github.com/github/gh-aw/actions/runs/34286112622) | `success` | `absent` | - | `-` |
| CLI Version Checker | [34190826308](https://github.com/github/gh-aw/actions/runs/34190826308) | `success` | `absent` | - | `-` |
| Cache directory setup | [34290845294](https://github.com/github/gh-aw/actions/runs/34290845294) | `success` | `absent` | - | `-` |
| Changeset Generator | [34215220468](https://github.com/github/gh-aw/actions/runs/34215220468) | `success` | `absent` | - | `-` |
| Changeset Generator | [34215225331](https://github.com/github/gh-aw/actions/runs/34215225331) | `success` | `absent` | - | `-` |
| Chaos PR Bundle Fuzzer | [34174373795](https://github.com/github/gh-aw/actions/runs/34174373795) | `success` | `absent` | - | `-` |
| Claude Code User Documentation Review | [34227198249](https://github.com/github/gh-aw/actions/runs/34227198249) | `success` | `unreadable` | - | `-` |
| Code Refiner | [34215220808](https://github.com/github/gh-aw/actions/runs/34215220808) | `success` | `absent` | - | `-` |
| Code Refiner | [34215225198](https://github.com/github/gh-aw/actions/runs/34215225198) | `cancelled` | `absent` | - | `-` |
| Code Refiner | [34215266628](https://github.com/github/gh-aw/actions/runs/34215266628) | `cancelled` | `absent` | - | `-` |
| Code Refiner | [34215277879](https://github.com/github/gh-aw/actions/runs/34215277879) | `success` | `absent` | - | `-` |
| Code Simplifier | [34183485265](https://github.com/github/gh-aw/actions/runs/34183485265) | `success` | `absent` | - | `-` |
| Copilot Session Insights | [34196590402](https://github.com/github/gh-aw/actions/runs/34196590402) | `success` | `unreadable` | - | `-` |
| Daily A/B Testing Advisor | [34215784429](https://github.com/github/gh-aw/actions/runs/34215784429) | `success` | `absent` | - | `-` |
| Daily AIC Consumption Report (Sentry + Grafana OTel) | [34222974033](https://github.com/github/gh-aw/actions/runs/34222974033) | `success` | `unreadable` | - | `-` |
| Daily AWF Spec Compiler Surfacing Review | [34285336729](https://github.com/github/gh-aw/actions/runs/34285336729) | `success` | `absent` | - | `-` |
| Daily AgentRx Trace Optimizer | [34190941444](https://github.com/github/gh-aw/actions/runs/34190941444) | `success` | `absent` | - | `-` |
| Daily AstroStyleLite Markdown Spellcheck | [34183412944](https://github.com/github/gh-aw/actions/runs/34183412944) | `success` | `unreadable` | - | `-` |
| Daily BYOK Ollama Test | [34285720078](https://github.com/github/gh-aw/actions/runs/34285720078) | `success` | `absent` | - | `-` |
| Daily CLI Performance Agent | [34240891724](https://github.com/github/gh-aw/actions/runs/34240891724) | `success` | `absent` | - | `-` |
| Daily Cli Tools Tester | [34190297493](https://github.com/github/gh-aw/actions/runs/34190297493) | `success` | `absent` | - | `-` |
| Daily Code Debt Cleanup — Aider | [34265551737](https://github.com/github/gh-aw/actions/runs/34265551737) | `success` | `absent` | - | `-` |
| Daily Code Metrics and Trend Tracking Agent | [34263857056](https://github.com/github/gh-aw/actions/runs/34263857056) | `success` | `absent` | - | `-` |
| Daily Documentation Diagram | [34188662216](https://github.com/github/gh-aw/actions/runs/34188662216) | `success` | `absent` | - | `-` |
| Daily Documentation Updater | [34216641589](https://github.com/github/gh-aw/actions/runs/34216641589) | `success` | `absent` | - | `-` |
| Daily Evals Feature Report | [34199248209](https://github.com/github/gh-aw/actions/runs/34199248209) | `success` | `absent` | - | `-` |
| Daily Fact | [34237778080](https://github.com/github/gh-aw/actions/runs/34237778080) | `success` | `absent` | - | `-` |
| Daily Firewall Logs Collector and Reporter | [34180184609](https://github.com/github/gh-aw/actions/runs/34180184609) | `success` | `absent` | - | `-` |
| Daily Go Test Parallelizer | [34196034399](https://github.com/github/gh-aw/actions/runs/34196034399) | `success` | `absent` | - | `-` |
| Daily Go Test Parallelizer | [34215889430](https://github.com/github/gh-aw/actions/runs/34215889430) | `success` | `absent` | - | `-` |
| Daily Go Test Parallelizer | [34227477016](https://github.com/github/gh-aw/actions/runs/34227477016) | `success` | `absent` | - | `-` |
| Daily Go Test Parallelizer | [34238926971](https://github.com/github/gh-aw/actions/runs/34238926971) | `success` | `absent` | - | `-` |
| Daily Go Test Parallelizer | [34251815620](https://github.com/github/gh-aw/actions/runs/34251815620) | `success` | `absent` | - | `-` |
| Daily Go Test Parallelizer | [34264002169](https://github.com/github/gh-aw/actions/runs/34264002169) | `success` | `absent` | - | `-` |
| Daily Go Test Parallelizer | [34286140385](https://github.com/github/gh-aw/actions/runs/34286140385) | `success` | `absent` | - | `-` |
| Daily Go Test Stubs — Aider | [34251775880](https://github.com/github/gh-aw/actions/runs/34251775880) | `success` | `absent` | - | `-` |

_72 further notable runs omitted; see `stats.json`._

## Change since 2026-09-07

| Metric | 2026-09-07 | 2026-09-08 | Δ | 7-day mean (09-01..09-07) |
|---|---|---|---|---|
| External detector runs | 718 | 1377 | +659 | 774.1 |
| Error rate | 0% | 0% | 0 | 0% |
| Soft failures | 92 | 120 | +28 | 81.7 |
| Runs with verdict | 267 | 273 | +6 | 255.6 |
| Any threat | 1 | 0 | -1 | 0.29 |
| Threat rate | 0.37% | 0% | -0.37 | 0.10% |

## Watch list

- Issue Monster — 0 failed, 27 without a verdict, out of 47 runs
- Avenger — 0 failed, 14 without a verdict, out of 24 runs
- PR Sous Chef — 0 failed, 2 without a verdict, out of 80 runs

Collected by: https://github.com/github/gh-aw-threat-detection/actions/runs/34309014831
Full data: the detection-stats-34309014831 artifact on that run.

> Generated by [Detection Stats Daily](https://github.com/github/gh-aw-threat-detection/actions/runs/34309014831) · copilot · auto · 36.8 AIC · ⌖ 10.1 AIC · ⊞ 11.3K · [◷](https://github.com/search?q=repo%3Agithub%2Fgh-aw-threat-detection+is%3Aissue+%22gh-aw-workflow-call-id%3A+github%2Fgh-aw-threat-detection%2Fdetection-stats-daily%22&type=issues)

Contributor guide

Open the contributing guide

Research direction

This issue is a generated daily detection-statistics report for GitHub Actions runs and does not identify a requested change, source file, or test. Start by checking whether the report data or generation process is missing anything; done would require a specific correction or documentation task to be defined.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions
Domain
observability, security
Issue type
Documentation
Difficulty
1/5
Estimated time
Under an hour
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.