github / github/gh-aw-threat-detection

[detection-stats] Detection stats for github/gh-aw - 2026-09-09

Open
#1,055 0 comments 0 reactions 0 assignees View on GitHub
automation detection-stats
Dominant language
Go
Stars
13
Forks
7
Avg merge
9h 52m
Merged PRs (30d)
25

Description

853 external-detector runs analysed · detection-job error rate 0% · soft failures 79 · threat rate 0%.

## Summary

# gh-aw detection statistics - 2026-09-09 (UTC)

Repository: `github/gh-aw`
Window: `2026-09-09T00:00:00Z` .. `2026-09-09T23:59:59Z`
API requests: 2289, rate-limit pauses: 1
Data complete: yes

## Totals

| Metric | Count |
|---|---|
| Workflow runs in window | 2612 |
| Agentic runs (`*.lock.yml`) | 1529 |
| Runs with a `detection` job | 1054 |
| ... using the external detector | 853 |
| ... using the built-in detector | 201 |
| ... detector could not be determined | 0 |
| Agentic runs without a `detection` job | 475 |

All rates below are over the **external detector** population (853 runs). Since gh-aw #54111 the external detector is the compile-time default; a run counts as external when its `detection` job showed the `Install threat-detect binary` step, when another run of the same workflow did that day, or when the workflow is `.lock.yml` and no run showed the built-in shape (a completed detection job with steps but no marker). Runs on a workflow that opted out with `features: gh-aw-detection: false` count as built-in.

## Detection job outcomes

| Outcome | Count | Rate |
|---|---|---|
| `skipped` | 449 | 52.64% |
| `success` | 402 | 47.13% |
| `cancelled` | 2 | 0.23% |

**Error rate (failure/timed_out/action_required): 0%**

## Verdict availability

| State | Meaning | Count |
|---|---|---|
| `present` | detection artifact downloaded and parsed | 318 |
| `absent` | detection job ran but published no artifact (soft failure) | 81 |
| `skipped` | detection job was skipped or was still running (nothing to fetch) | 449 |
| `unreadable` | artifact zip could not be unpacked | 5 |

Green detection jobs that published no verdict: **79** (detection steps are `continue-on-error`, so a missing verdict artifact is the only reliable signal for these).

## Detection results

| Result | Count |
|---|---|
| Runs with a parsed verdict | 318 |
| Clean (no threat) | 318 |
| Any threat | 0 |
| `prompt_injection` | 0 |
| `secret_leak` | 0 |
| `malicious_patch` | 0 |

**Threat rate (of runs with a verdict): 0%**

## By workflow

| Workflow | Runs | Failed | Cancelled | Skipped | No verdict | Threats |
|---|---|---|---|---|---|---|
| Deployment Incident Monitor | 84 | 0 | 0 | 84 | 0 | 0 |
| Q | 82 | 0 | 0 | 82 | 0 | 0 |
| PR Sous Chef | 81 | 0 | 0 | 0 | 1 | 0 |
| Daily Trajectory Grader Implementer | 47 | 0 | 0 | 47 | 0 | 0 |
| Issue Monster | 47 | 0 | 0 | 10 | 7 | 0 |
| [aw] Failure Investigator (6h) | 47 | 0 | 0 | 42 | 0 | 0 |
| Avenger | 24 | 0 | 0 | 19 | 5 | 0 |
| Auto-Triage Issues | 20 | 0 | 0 | 14 | 4 | 0 |
| Design Decision Gate 🏗️ | 17 | 0 | 0 | 2 | 1 | 0 |
| Impeccable Skills Reviewer | 16 | 0 | 0 | 0 | 0 | 0 |
| Matt Pocock Skills Reviewer | 16 | 0 | 0 | 0 | 1 | 0 |
| PR Code Quality Reviewer | 16 | 0 | 0 | 0 | 0 | 0 |
| Ponytail Reviewer | 16 | 0 | 0 | 0 | 4 | 0 |
| Test Quality Sentinel | 16 | 0 | 0 | 0 | 0 | 0 |
| Daily Go Test Parallelizer | 12 | 0 | 0 | 1 | 4 | 0 |
| Workflow Generator | 12 | 0 | 0 | 12 | 0 | 0 |
| Smoke Gemini | 7 | 0 | 0 | 6 | 1 | 0 |
| Contribution Check | 6 | 0 | 0 | 0 | 0 | 0 |
| The Great Escapi | 6 | 0 | 1 | 4 | 1 | 0 |
| Squad — ``@copilot`` resolve the merge conflicts on this branch. | 5 | 0 | 0 | 5 | 0 | 0 |
| Changeset Generator | 4 | 0 | 0 | 4 | 0 | 0 |
| Code Refiner | 4 | 0 | 1 | 3 | 1 | 0 |
| Code Scanning Fixer | 4 | 0 | 0 | 0 | 0 | 0 |
| Deep Report | 4 | 0 | 0 | 0 | 3 | 0 |
| PR Triage Agent | 4 | 0 | 0 | 0 | 0 | 0 |

_247 further workflows omitted; see `stats.json`._

## Notable runs

| Workflow | Run | Job conclusion | Verdict | Threats | Reported reason |
|---|---|---|---|---|---|
| Agent Job Health Monitor | [34416287285](https://github.com/github/gh-aw/actions/runs/34416287285) | `success` | `absent` | - | `-` |
| Agent Persona Explorer | [34370852993](https://github.com/github/gh-aw/actions/runs/34370852993) | `success` | `absent` | - | `-` |
| Agentic Workflow Audit Agent | [34406052830](https://github.com/github/gh-aw/actions/runs/34406052830) | `success` | `absent` | - | `-` |
| Auto-Triage Issues | [34297124037](https://github.com/github/gh-aw/actions/runs/34297124037) | `success` | `absent` | - | `-` |
| Auto-Triage Issues | [34302307632](https://github.com/github/gh-aw/actions/runs/34302307632) | `success` | `unreadable` | - | `-` |
| Auto-Triage Issues | [34319902256](https://github.com/github/gh-aw/actions/runs/34319902256) | `success` | `unreadable` | - | `-` |
| Auto-Triage Issues | [34351735561](https://github.com/github/gh-aw/actions/runs/34351735561) | `success` | `absent` | - | `-` |
| Auto-Triage Issues | [34389119739](https://github.com/github/gh-aw/actions/runs/34389119739) | `success` | `absent` | - | `-` |
| Auto-Triage Issues | [34413801964](https://github.com/github/gh-aw/actions/runs/34413801964) | `success` | `absent` | - | `-` |
| Avenger | [34320511495](https://github.com/github/gh-aw/actions/runs/34320511495) | `success` | `absent` | - | `-` |
| Avenger | [34324401081](https://github.com/github/gh-aw/actions/runs/34324401081) | `success` | `absent` | - | `-` |
| Avenger | [34352459822](https://github.com/github/gh-aw/actions/runs/34352459822) | `success` | `absent` | - | `-` |
| Avenger | [34364218899](https://github.com/github/gh-aw/actions/runs/34364218899) | `success` | `absent` | - | `-` |
| Avenger | [34383211449](https://github.com/github/gh-aw/actions/runs/34383211449) | `success` | `absent` | - | `-` |
| Blog Auditor | [34345827916](https://github.com/github/gh-aw/actions/runs/34345827916) | `success` | `unreadable` | - | `-` |
| CLI Version Checker | [34315088813](https://github.com/github/gh-aw/actions/runs/34315088813) | `success` | `absent` | - | `-` |
| Cache directory setup | [34417125237](https://github.com/github/gh-aw/actions/runs/34417125237) | `success` | `absent` | - | `-` |
| Code Refiner | [34390324919](https://github.com/github/gh-aw/actions/runs/34390324919) | `cancelled` | `absent` | - | `-` |
| Daily A/B Testing Advisor | [34340587668](https://github.com/github/gh-aw/actions/runs/34340587668) | `success` | `absent` | - | `-` |
| Daily AW Cross-Repo Compile Check | [34330975584](https://github.com/github/gh-aw/actions/runs/34330975584) | `success` | `absent` | - | `-` |
| Daily AWF Spec Compiler Surfacing Review | [34411618394](https://github.com/github/gh-aw/actions/runs/34411618394) | `success` | `absent` | - | `-` |
| Daily BYOK Ollama Test | [34411989648](https://github.com/github/gh-aw/actions/runs/34411989648) | `success` | `absent` | - | `-` |
| Daily CLI Performance Agent | [34366197772](https://github.com/github/gh-aw/actions/runs/34366197772) | `success` | `absent` | - | `-` |
| Daily Cache Strategy Analyzer | [34389725133](https://github.com/github/gh-aw/actions/runs/34389725133) | `success` | `absent` | - | `-` |
| Daily Cli Tools Tester | [34314505071](https://github.com/github/gh-aw/actions/runs/34314505071) | `success` | `absent` | - | `-` |
| Daily Code Debt Cleanup — Aider | [34391501451](https://github.com/github/gh-aw/actions/runs/34391501451) | `success` | `absent` | - | `-` |
| Daily Code Metrics and Trend Tracking Agent | [34389764307](https://github.com/github/gh-aw/actions/runs/34389764307) | `success` | `absent` | - | `-` |
| Daily Documentation Diagram | [34312779484](https://github.com/github/gh-aw/actions/runs/34312779484) | `success` | `absent` | - | `-` |
| Daily Evals Feature Report | [34323819325](https://github.com/github/gh-aw/actions/runs/34323819325) | `success` | `absent` | - | `-` |
| Daily Fact | [34362883515](https://github.com/github/gh-aw/actions/runs/34362883515) | `success` | `absent` | - | `-` |
| Daily Go Test Parallelizer | [34303940325](https://github.com/github/gh-aw/actions/runs/34303940325) | `success` | `absent` | - | `-` |
| Daily Go Test Parallelizer | [34311490647](https://github.com/github/gh-aw/actions/runs/34311490647) | `success` | `absent` | - | `-` |
| Daily Go Test Parallelizer | [34330042795](https://github.com/github/gh-aw/actions/runs/34330042795) | `success` | `absent` | - | `-` |
| Daily Go Test Parallelizer | [34389912414](https://github.com/github/gh-aw/actions/runs/34389912414) | `success` | `absent` | - | `-` |
| Daily Go Test Stubs — Aider | [34377347395](https://github.com/github/gh-aw/actions/runs/34377347395) | `success` | `absent` | - | `-` |
| Daily Grader Audit | [34325461723](https://github.com/github/gh-aw/actions/runs/34325461723) | `success` | `unreadable` | - | `-` |
| Daily Max Ai Credits Test | [34344969595](https://github.com/github/gh-aw/actions/runs/34344969595) | `success` | `absent` | - | `-` |
| Daily Regulatory Report Generator | [34406097286](https://github.com/github/gh-aw/actions/runs/34406097286) | `success` | `absent` | - | `-` |
| Daily Reliability Review | [34414344193](https://github.com/github/gh-aw/actions/runs/34414344193) | `success` | `absent` | - | `-` |
| Daily Security Observability Report | [34373150221](https://github.com/github/gh-aw/actions/runs/34373150221) | `success` | `absent` | - | `-` |
| Daily Sub-Agent Model Resolution Audit | [34315176601](https://github.com/github/gh-aw/actions/runs/34315176601) | `success` | `absent` | - | `-` |
| Daily Team Evolution Insights | [34400478057](https://github.com/github/gh-aw/actions/runs/34400478057) | `success` | `absent` | - | `-` |
| Deep Report | [34297094296](https://github.com/github/gh-aw/actions/runs/34297094296) | `success` | `absent` | - | `-` |
| Deep Report | [34351644556](https://github.com/github/gh-aw/actions/runs/34351644556) | `success` | `absent` | - | `-` |
| Deep Report | [34389099328](https://github.com/github/gh-aw/actions/runs/34389099328) | `success` | `absent` | - | `-` |
| Dependabot Dependency Checker | [34335204840](https://github.com/github/gh-aw/actions/runs/34335204840) | `success` | `absent` | - | `-` |
| Design Decision Gate 🏗️ | [34365387888](https://github.com/github/gh-aw/actions/runs/34365387888) | `success` | `absent` | - | `-` |
| Designer Drift Audit | [34308334663](https://github.com/github/gh-aw/actions/runs/34308334663) | `success` | `absent` | - | `-` |
| Documentation Unbloat | [34297460653](https://github.com/github/gh-aw/actions/runs/34297460653) | `success` | `absent` | - | `-` |
| ESLint Monster | [34409457885](https://github.com/github/gh-aw/actions/runs/34409457885) | `success` | `absent` | - | `-` |
| GPL Dependency Cleaner (gpclean) | [34307042980](https://github.com/github/gh-aw/actions/runs/34307042980) | `success` | `absent` | - | `-` |
| GitHub API Consumption Report Agent | [34341825885](https://github.com/github/gh-aw/actions/runs/34341825885) | `success` | `absent` | - | `-` |
| GitHub Remote MCP Authentication Test | [34315100817](https://github.com/github/gh-aw/actions/runs/34315100817) | `success` | `absent` | - | `-` |
| Go Fan | [34326493762](https://github.com/github/gh-aw/actions/runs/34326493762) | `success` | `absent` | - | `-` |
| Instructions Janitor | [34330034586](https://github.com/github/gh-aw/actions/runs/34330034586) | `success` | `absent` | - | `-` |
| Issue Arborist | [34314476514](https://github.com/github/gh-aw/actions/runs/34314476514) | `success` | `absent` | - | `-` |
| Issue Monster | [34300847678](https://github.com/github/gh-aw/actions/runs/34300847678) | `success` | `absent` | - | `-` |
| Issue Monster | [34307011643](https://github.com/github/gh-aw/actions/runs/34307011643) | `success` | `absent` | - | `-` |
| Issue Monster | [34308267589](https://github.com/github/gh-aw/actions/runs/34308267589) | `success` | `absent` | - | `-` |
| Issue Monster | [34310829204](https://github.com/github/gh-aw/actions/runs/34310829204) | `success` | `absent` | - | `-` |

_26 further notable runs omitted; see `stats.json`._

## Change since 2026-09-08

| Metric | 2026-09-08 | 2026-09-09 | Delta | 7-day mean |
|---|---|---|---|---|
| External detector runs | 1377 | 853 | -524 | 850.3 |
| Error rate | 0% | 0% | 0 pp | 0% |
| Soft failures | 120 | 79 | -41 | 87.0 |
| Runs with verdict | 273 | 318 | +45 | n/a |
| Any threat | 0 | 0 | 0 | 0.3 |
| Threat rate | 0% | 0% | 0 pp | 0.10% |

## Watch list

- Issue Monster — 0 failed, 7 without a verdict, out of 47 runs
- Avenger — 0 failed, 5 without a verdict, out of 24 runs
- Auto-Triage Issues — 0 failed, 4 without a verdict, out of 20 runs
- Ponytail Reviewer — 0 failed, 4 without a verdict, out of 16 runs
- Daily Go Test Parallelizer — 0 failed, 4 without a verdict, out of 12 runs

Collected by: https://github.com/github/gh-aw-threat-detection/actions/runs/34435201622
Full data: the detection-stats-34435201622 artifact on that run.

> Generated by [Detection Stats Daily](https://github.com/github/gh-aw-threat-detection/actions/runs/34435201622) · copilot · auto · 25.1 AIC · ⌖ 9.3 AIC · ⊞ 10K · [◷](https://github.com/search?q=repo%3Agithub%2Fgh-aw-threat-detection+is%3Aissue+%22gh-aw-workflow-call-id%3A+github%2Fgh-aw-threat-detection%2Fdetection-stats-daily%22&type=issues)

Contributor guide

Open the contributing guide

Research direction

Review the daily detection report and the referenced stats.json, including the workflow and notable-run tables. No code change, requested outcome, or acceptance criteria are specified, so confirm with maintainers what contribution is intended before starting.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions
Domain
security
Issue type
Documentation
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.