github / github/gh-aw-threat-detection

[detection-stats] Detection stats for github/gh-aw - 2026-09-12

Open
#1,073 0 comments 0 reactions 0 assignees View on GitHub
automation detection-stats
Dominant language
Go
Stars
13
Forks
7
Avg merge
9h 52m
Merged PRs (30d)
25

Description

598 external-detector runs analysed; detection-job error rate 0%; soft failures 11; threat rate 0% (of 95 verdicts).

## Summary

# gh-aw detection statistics - 2026-09-12 (UTC)

Repository: `github/gh-aw`
Window: `2026-09-12T00:00:00Z` .. `2026-09-12T23:59:59Z`
API requests: 1235, rate-limit pauses: 1
Data complete: yes

## Totals

| Metric | Count |
|---|---|
| Workflow runs in window | 1526 |
| Agentic runs (`*.lock.yml`) | 851 |
| Runs with a `detection` job | 599 |
| ... using the external detector | 598 |
| ... using the built-in detector | 1 |
| ... detector could not be determined | 0 |
| Agentic runs without a `detection` job | 252 |

All rates below are over the **external detector** population (598 runs). Since gh-aw #54111 the external detector is the compile-time default; a run counts as external when its `detection` job showed the `Install threat-detect binary` step, when another run of the same workflow did that day, or when the workflow is `.lock.yml` and no run showed the built-in shape (a completed detection job with steps but no marker). Runs on a workflow that opted out with `features: gh-aw-detection: false` count as built-in.

## Detection job outcomes

| Outcome | Count | Rate |
|---|---|---|
| `skipped` | 410 | 68.56% |
| `success` | 188 | 31.44% |

**Error rate (failure/timed_out/action_required): 0%**

## Verdict availability

| State | Meaning | Count |
|---|---|---|
| `present` | detection artifact downloaded and parsed | 95 |
| `absent` | detection job ran but published no artifact (soft failure) | 11 |
| `skipped` | detection job was skipped or was still running (nothing to fetch) | 410 |
| `unreadable` | artifact zip could not be unpacked | 82 |

Green detection jobs that published no verdict: **11** (detection steps are `continue-on-error`, so a missing verdict artifact is the only reliable signal for these).

## Detection results

| Result | Count |
|---|---|
| Runs with a parsed verdict | 95 |
| Clean (no threat) | 95 |
| Any threat | 0 |
| `prompt_injection` | 0 |
| `secret_leak` | 0 |
| `malicious_patch` | 0 |

**Threat rate (of runs with a verdict): 0%**

## By workflow

| Workflow | Runs | Failed | Cancelled | Skipped | No verdict | Threats |
|---|---|---|---|---|---|---|
| PR Sous Chef | 87 | 0 | 0 | 80 | 0 | 0 |
| Daily Trajectory Grader Implementer | 47 | 0 | 0 | 47 | 0 | 0 |
| Issue Monster | 47 | 0 | 0 | 40 | 0 | 0 |
| [aw] Failure Investigator (6h) | 47 | 0 | 0 | 45 | 0 | 0 |
| Deployment Incident Monitor | 33 | 0 | 0 | 33 | 0 | 0 |
| Q | 29 | 0 | 0 | 29 | 0 | 0 |
| Avenger | 24 | 0 | 0 | 21 | 0 | 0 |
| Test Quality Sentinel | 17 | 0 | 0 | 0 | 0 | 0 |
| Design Decision Gate 🏗️ | 16 | 0 | 0 | 0 | 1 | 0 |
| Impeccable Skills Reviewer | 16 | 0 | 0 | 8 | 0 | 0 |
| Matt Pocock Skills Reviewer | 16 | 0 | 0 | 0 | 2 | 0 |
| PR Code Quality Reviewer | 16 | 0 | 0 | 0 | 5 | 0 |
| Ponytail Reviewer | 16 | 0 | 0 | 0 | 3 | 0 |
| Daily Go Test Parallelizer | 12 | 0 | 0 | 5 | 0 | 0 |
| Squad — ``@copilot`` run pr-finisher skill | 7 | 0 | 0 | 7 | 0 | 0 |
| Auto-Triage Issues | 6 | 0 | 0 | 4 | 0 | 0 |
| Contribution Check | 6 | 0 | 0 | 3 | 0 | 0 |
| Code Scanning Fixer | 4 | 0 | 0 | 3 | 0 | 0 |
| Deep Report | 4 | 0 | 0 | 2 | 0 | 0 |
| PR Triage Agent | 4 | 0 | 0 | 3 | 0 | 0 |
| Daily Credit Limit Test | 2 | 0 | 0 | 1 | 0 | 0 |
| Workflow Generator | 2 | 0 | 0 | 2 | 0 | 0 |
| Agent Job Health Monitor | 1 | 0 | 0 | 0 | 0 | 0 |
| Agent Performance Analyzer - Meta-Orchestrator | 1 | 0 | 0 | 0 | 0 | 0 |
| Agent Persona Explorer | 1 | 0 | 0 | 1 | 0 | 0 |

_137 further workflows omitted; see `stats.json`._

## Notable runs

| Workflow | Run | Job conclusion | Verdict | Threats | Reported reason |
|---|---|---|---|---|---|
| Agent Job Health Monitor | [34725022265](https://github.com/github/gh-aw/actions/runs/34725022265) | `success` | `unreadable` | - | `-` |
| Agentic Workflow Audit Agent | [34719568284](https://github.com/github/gh-aw/actions/runs/34719568284) | `success` | `unreadable` | - | `-` |
| Auto-Triage Issues | [34693761730](https://github.com/github/gh-aw/actions/runs/34693761730) | `success` | `unreadable` | - | `-` |
| Auto-Triage Issues | [34711031992](https://github.com/github/gh-aw/actions/runs/34711031992) | `success` | `unreadable` | - | `-` |
| Avenger | [34711413449](https://github.com/github/gh-aw/actions/runs/34711413449) | `success` | `unreadable` | - | `-` |
| Avenger | [34714197572](https://github.com/github/gh-aw/actions/runs/34714197572) | `success` | `unreadable` | - | `-` |
| Avenger | [34717300273](https://github.com/github/gh-aw/actions/runs/34717300273) | `success` | `unreadable` | - | `-` |
| Cache directory setup | [34725527069](https://github.com/github/gh-aw/actions/runs/34725527069) | `success` | `unreadable` | - | `-` |
| Daily AWF Spec Compiler Surfacing Review | [34722402763](https://github.com/github/gh-aw/actions/runs/34722402763) | `success` | `unreadable` | - | `-` |
| Daily CLI Performance Agent | [34700427287](https://github.com/github/gh-aw/actions/runs/34700427287) | `success` | `unreadable` | - | `-` |
| Daily Cache Strategy Analyzer | [34711313400](https://github.com/github/gh-aw/actions/runs/34711313400) | `success` | `unreadable` | - | `-` |
| Daily Code Debt Cleanup — Aider | [34712411162](https://github.com/github/gh-aw/actions/runs/34712411162) | `success` | `unreadable` | - | `-` |
| Daily Documentation Diagram | [34674234221](https://github.com/github/gh-aw/actions/runs/34674234221) | `success` | `unreadable` | - | `-` |
| Daily Documentation Updater | [34688969968](https://github.com/github/gh-aw/actions/runs/34688969968) | `success` | `unreadable` | - | `-` |
| Daily Go Function Namer | [34691648840](https://github.com/github/gh-aw/actions/runs/34691648840) | `success` | `unreadable` | - | `-` |
| Daily Go Test Parallelizer | [34711425224](https://github.com/github/gh-aw/actions/runs/34711425224) | `success` | `unreadable` | - | `-` |
| Daily Go Test Parallelizer | [34717326266](https://github.com/github/gh-aw/actions/runs/34717326266) | `success` | `unreadable` | - | `-` |
| Daily Go Test Parallelizer | [34722856473](https://github.com/github/gh-aw/actions/runs/34722856473) | `success` | `unreadable` | - | `-` |
| Daily Max Ai Credits Test | [34690629986](https://github.com/github/gh-aw/actions/runs/34690629986) | `success` | `unreadable` | - | `-` |
| Daily Project Performance Summary Generator (Using MCP Scripts) | [34717913374](https://github.com/github/gh-aw/actions/runs/34717913374) | `success` | `unreadable` | - | `-` |
| Daily Regulatory Report Generator | [34719591529](https://github.com/github/gh-aw/actions/runs/34719591529) | `success` | `unreadable` | - | `-` |
| Daily Security Observability Report | [34703563472](https://github.com/github/gh-aw/actions/runs/34703563472) | `success` | `unreadable` | - | `-` |
| Daily Sub-Agent Model Resolution Audit | [34675718879](https://github.com/github/gh-aw/actions/runs/34675718879) | `success` | `unreadable` | - | `-` |
| Daily Team Evolution Insights | [34716769663](https://github.com/github/gh-aw/actions/runs/34716769663) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34661371643](https://github.com/github/gh-aw/actions/runs/34661371643) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34661393432](https://github.com/github/gh-aw/actions/runs/34661393432) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34662392341](https://github.com/github/gh-aw/actions/runs/34662392341) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34662791062](https://github.com/github/gh-aw/actions/runs/34662791062) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34664226544](https://github.com/github/gh-aw/actions/runs/34664226544) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34670839383](https://github.com/github/gh-aw/actions/runs/34670839383) | `success` | `absent` | - | `-` |
| Design Decision Gate 🏗️ | [34674344416](https://github.com/github/gh-aw/actions/runs/34674344416) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34676638964](https://github.com/github/gh-aw/actions/runs/34676638964) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34701176201](https://github.com/github/gh-aw/actions/runs/34701176201) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34701296806](https://github.com/github/gh-aw/actions/runs/34701296806) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34703794616](https://github.com/github/gh-aw/actions/runs/34703794616) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34705694638](https://github.com/github/gh-aw/actions/runs/34705694638) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34710556046](https://github.com/github/gh-aw/actions/runs/34710556046) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34711483963](https://github.com/github/gh-aw/actions/runs/34711483963) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34717730897](https://github.com/github/gh-aw/actions/runs/34717730897) | `success` | `unreadable` | - | `-` |
| Design Decision Gate 🏗️ | [34721752696](https://github.com/github/gh-aw/actions/runs/34721752696) | `success` | `unreadable` | - | `-` |
| Detection Analysis Report | [34725014090](https://github.com/github/gh-aw/actions/runs/34725014090) | `success` | `unreadable` | - | `-` |
| Documentation Unbloat | [34663385793](https://github.com/github/gh-aw/actions/runs/34663385793) | `success` | `unreadable` | - | `-` |
| ESLint Monster | [34721280727](https://github.com/github/gh-aw/actions/runs/34721280727) | `success` | `unreadable` | - | `-` |
| Impeccable Skills Reviewer | [34701296687](https://github.com/github/gh-aw/actions/runs/34701296687) | `success` | `unreadable` | - | `-` |
| Instructions Janitor | [34683564668](https://github.com/github/gh-aw/actions/runs/34683564668) | `success` | `unreadable` | - | `-` |
| Issue Monster | [34722339412](https://github.com/github/gh-aw/actions/runs/34722339412) | `success` | `unreadable` | - | `-` |
| Issue Monster | [34723403858](https://github.com/github/gh-aw/actions/runs/34723403858) | `success` | `unreadable` | - | `-` |
| Issue Monster | [34725004831](https://github.com/github/gh-aw/actions/runs/34725004831) | `success` | `unreadable` | - | `-` |
| Issue Monster | [34725971869](https://github.com/github/gh-aw/actions/runs/34725971869) | `success` | `unreadable` | - | `-` |
| Lockfile Statistics Analysis Agent | [34716795741](https://github.com/github/gh-aw/actions/runs/34716795741) | `success` | `unreadable` | - | `-` |
| Matt Pocock Skills Reviewer | [34662392340](https://github.com/github/gh-aw/actions/runs/34662392340) | `success` | `unreadable` | - | `-` |
| Matt Pocock Skills Reviewer | [34662791124](https://github.com/github/gh-aw/actions/runs/34662791124) | `success` | `absent` | - | `-` |
| Matt Pocock Skills Reviewer | [34670839226](https://github.com/github/gh-aw/actions/runs/34670839226) | `success` | `absent` | - | `-` |
| Matt Pocock Skills Reviewer | [34701296695](https://github.com/github/gh-aw/actions/runs/34701296695) | `success` | `unreadable` | - | `-` |
| Matt Pocock Skills Reviewer | [34711484052](https://github.com/github/gh-aw/actions/runs/34711484052) | `success` | `unreadable` | - | `-` |
| Multi-Device Docs Tester | [34675718884](https://github.com/github/gh-aw/actions/runs/34675718884) | `success` | `unreadable` | - | `-` |
| PR Code Quality Reviewer | [34661371756](https://github.com/github/gh-aw/actions/runs/34661371756) | `success` | `absent` | - | `-` |
| PR Code Quality Reviewer | [34661393593](https://github.com/github/gh-aw/actions/runs/34661393593) | `success` | `absent` | - | `-` |
| PR Code Quality Reviewer | [34662392322](https://github.com/github/gh-aw/actions/runs/34662392322) | `success` | `unreadable` | - | `-` |
| PR Code Quality Reviewer | [34662791179](https://github.com/github/gh-aw/actions/runs/34662791179) | `success` | `absent` | - | `-` |

_33 further notable runs omitted; see `stats.json`._

## Change since 2026-09-11

| Metric | 2026-09-11 | 2026-09-12 | Delta | 7-day mean |
|---|---|---|---|---|
| External detector runs | 1406 | 598 | -808 | 919.3 |
| Error rate | 0.43% | 0% | -0.43pp | 0.06% |
| Soft failures | 106 | 11 | -95 | 87.6 |
| Runs with verdict | 173 | 95 | -78 | 256.4 |
| Any threat | 0 | 0 | 0 | 0.0 |
| Threat rate | 0% | 0% | 0pp | 0.0% |

## Watch list

- PR Code Quality Reviewer — 0 failed, 5 without a verdict, out of 16 runs
- Ponytail Reviewer — 0 failed, 3 without a verdict, out of 16 runs
- Matt Pocock Skills Reviewer — 0 failed, 2 without a verdict, out of 16 runs
- Design Decision Gate 🏗️ — 0 failed, 1 without a verdict, out of 16 runs

Collected by: https://github.com/github/gh-aw-threat-detection/actions/runs/34736672305
Full data: the detection-stats-34736672305 artifact on that run.

> Generated by [Detection Stats Daily](https://github.com/github/gh-aw-threat-detection/actions/runs/34736672305) · copilot · auto · 29.5 AIC · ⌖ 7.59 AIC · ⊞ 10K · [◷](https://github.com/search?q=repo%3Agithub%2Fgh-aw-threat-detection+is%3Aissue+%22gh-aw-workflow-call-id%3A+github%2Fgh-aw-threat-detection%2Fdetection-stats-daily%22&type=issues)

Contributor guide

Open the contributing guide

Research direction

The report summarizes detection-job outcomes and points to stats.json for the omitted workflows; start by reviewing that generated data alongside the external-detector and verdict tables. No source file, test, or concrete change is specified, so the intended update and completion criteria need clarification before implementation.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions
Domain
security
Issue type
Documentation
Difficulty
1/5
Estimated time
Under an hour
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.