[detection-failures] Detection failures in github/gh-aw - 2026-09-11

Found 3 failing detection jobs (0 hard failures, 3 soft failures) among the 80 most recent completed `github/gh-aw` workflow runs scanned (2026-09-11T02:13:40Z–2026-09-11T02:39:10Z), within the last 24 hours.

## Failing Detection Jobs

- PR Code Quality Reviewer — run https://github.com/github/gh-aw/actions/runs/34554153946 — job https://github.com/github/gh-aw/actions/runs/34554153946/job/103123986338 — success — step — threat-detect binary not found on PATH
- PR Code Quality Reviewer — run https://github.com/github/gh-aw/actions/runs/34554203589 — job https://github.com/github/gh-aw/actions/runs/34554203589/job/103124141992 — success — step — threat-detect binary not found on PATH
- Matt Pocock Skills Reviewer — run https://github.com/github/gh-aw/actions/runs/34554203381 — job https://github.com/github/gh-aw/actions/runs/34554203381/job/103126944213 — success — step — threat-detect binary not found on PATH

```json
[
{
"workflow": "PR Code Quality Reviewer",
"run_id": 34554153946,
"run_url": "https://github.com/github/gh-aw/actions/runs/34554153946",
"job_id": 103123986338,
"job_url": "https://github.com/github/gh-aw/actions/runs/34554153946/job/103123986338",
"conclusion": "success",
"failure_kind": "step",
"reason": "threat-detect binary not found on PATH"
},
{
"workflow": "PR Code Quality Reviewer",
"run_id": 34554203589,
"run_url": "https://github.com/github/gh-aw/actions/runs/34554203589",
"job_id": 103124141992,
"job_url": "https://github.com/github/gh-aw/actions/runs/34554203589/job/103124141992",
"conclusion": "success",
"failure_kind": "step",
"reason": "threat-detect binary not found on PATH"
},
{
"workflow": "Matt Pocock Skills Reviewer",
"run_id": 34554203381,
"run_url": "https://github.com/github/gh-aw/actions/runs/34554203381",
"job_id": 103126944213,
"job_url": "https://github.com/github/gh-aw/actions/runs/34554203381/job/103126944213",
"conclusion": "success",
"failure_kind": "step",
"reason": "threat-detect binary not found on PATH"
}
]
```

Scanned: https://github.com/github/gh-aw-threat-detection/actions/runs/34555383756

> Generated by [Detection Failure Monitor](https://github.com/github/gh-aw-threat-detection/actions/runs/34555383756) · copilot · auto · 108.3 AIC · ⌖ 4.9 AIC · ⊞ 9.2K · [◷](https://github.com/search?q=repo%3Agithub%2Fgh-aw-threat-detection+is%3Aissue+%22gh-aw-workflow-call-id%3A+github%2Fgh-aw-threat-detection%2Fdetection-failure-monitor%22&type=issues)

Start by inspecting the three linked GitHub Actions jobs and the Detection Failure Monitor run to trace where threat-detect is expected to be installed or added to PATH. Reproduce the missing-binary step and verify that the affected workflows can invoke threat-detect successfully without reporting detection failures.

Written by the indexing model from the issue text.