github / github/gh-aw-threat-detection

Workflow version drift: locks need regenerating

Open
#999 0 comments 0 reactions 0 assignees View on GitHub
workflow-version-drift
Dominant language
Go
Stars
13
Forks
7
Avg merge
9h 52m
Merged PRs (30d)
25

Description

## Workflow version drift detected

One or more compiled workflow `.lock.yml` files are pinned to an outdated version.

### Target versions

| Field | Repo | Target |
|-------|------|--------|
| `gh-aw` (compiler, all locks) | `github/gh-aw` | `v0.89.15` |
| `threat-detect` (smoke locks only) | `github/gh-aw-threat-detection` | `v0.5.1` |

Both targets are the newest release **or prerelease** in their respective repo.

### Workflows needing an update

| Workflow | Field | Current | Target |
|----------|-------|---------|--------|
| `detection-failure-monitor` | gh-aw | `v0.87.8` | `v0.89.15` |
| `detection-stats-daily` | gh-aw | `v0.87.8` | `v0.89.15` |
| `gh-aw-issue-digest` | gh-aw | `v0.87.8` | `v0.89.15` |
| `gh-aw-parity-monitor` | gh-aw | `v0.87.8` | `v0.89.15` |
| `smoke-claude-standalone` | gh-aw | `v0.87.8` | `v0.89.15` |
| `smoke-codex-standalone` | gh-aw | `v0.87.8` | `v0.89.15` |
| `smoke-copilot-standalone` | gh-aw | `v0.87.8` | `v0.89.15` |

### How to fix

Regenerating the locks is a manual, human-reviewed step (pushing changes under
`.github/workflows/` needs a token with the `workflows` permission, which the
built-in `GITHUB_TOKEN` lacks). Follow the **update-workflow-versions** skill:

➡️ https://github.com/github/gh-aw-threat-detection/blob/main/skills/update-workflow-versions/SKILL.md

Generated by `.github/workflows/gh-aw-version-check.yml`.

Contributor guide

Open the contributing guide

Research direction

Start by reading the update-workflow-versions skill linked in the issue, then inspect the compiled locks for detection-failure-monitor, detection-stats-daily, gh-aw-issue-digest, gh-aw-parity-monitor, smoke-claude-standalone, smoke-codex-standalone, and smoke-copilot-standalone. Regenerate the locks with gh-aw at v0.89.15 and the specified smoke-lock threat-detect version v0.5.1, then verify the workflow version check passes.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions
Domain
ci-cd
Issue type
Refactor
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Clearly specified
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.