[detection-failures] Detection failures in github/gh-aw - 2026-09-13

2 failing detection jobs found in `github/gh-aw` in the last 24 hours (0 hard failures, 2 soft failures). Scan window: 2026-09-12T02:38:45Z to 2026-09-13T02:38:45Z.

## Failing Detection Jobs

- Design Decision Gate 🏗️ — run https://github.com/github/gh-aw/actions/runs/34730741728 — job https://github.com/github/gh-aw/actions/runs/34730741728/job/103653537666 — success — step — "threat-detect binary not found on PATH"
- PR Code Quality Reviewer — run https://github.com/github/gh-aw/actions/runs/34730741760 — job https://github.com/github/gh-aw/actions/runs/34730741760/job/103653771294 — success — step — "threat-detect binary not found on PATH"

```json
[
{
"workflow": "Design Decision Gate 🏗️",
"run_id": 34730741728,
"run_url": "https://github.com/github/gh-aw/actions/runs/34730741728",
"job_id": 103653537666,
"job_url": "https://github.com/github/gh-aw/actions/runs/34730741728/job/103653537666",
"conclusion": "success",
"failure_kind": "step",
"reason": "threat-detect binary not found on PATH"
},
{
"workflow": "PR Code Quality Reviewer",
"run_id": 34730741760,
"run_url": "https://github.com/github/gh-aw/actions/runs/34730741760",
"job_id": 103653771294,
"job_url": "https://github.com/github/gh-aw/actions/runs/34730741760/job/103653771294",
"conclusion": "success",
"failure_kind": "step",
"reason": "threat-detect binary not found on PATH"
}
]
```

Scanned: https://github.com/github/gh-aw-threat-detection/actions/runs/34733502423

> Generated by [Detection Failure Monitor](https://github.com/github/gh-aw-threat-detection/actions/runs/34733502423) · copilot · auto · 59.1 AIC · ⌖ 3.6 AIC · ⊞ 9.2K · [◷](https://github.com/search?q=repo%3Agithub%2Fgh-aw-threat-detection+is%3Aissue+%22gh-aw-workflow-call-id%3A+github%2Fgh-aw-threat-detection%2Fdetection-failure-monitor%22&type=issues)

Start by opening the Design Decision Gate and PR Code Quality Reviewer job logs linked in the issue, then inspect how each workflow makes the threat-detect binary available. Done means both detection jobs can find and run threat-detect on PATH without reporting this failure.

Written by the indexing model from the issue text.