github / github/gh-aw-threat-detection
Workflow version drift: locks need regenerating
- Dominant language
- Go
- Stars
- 13
- Forks
- 7
- Avg merge
- 9h 52m
- Merged PRs (30d)
- 25
Description
## Workflow version drift detected
One or more compiled workflow `.lock.yml` files are pinned to an outdated version.
### Target versions
| Field | Repo | Target |
|-------|------|--------|
| `gh-aw` (compiler, all locks) | `github/gh-aw` | `v0.89.15` |
| `threat-detect` (smoke locks only) | `github/gh-aw-threat-detection` | `v0.5.1` |
Both targets are the newest release **or prerelease** in their respective repo.
### Workflows needing an update
| Workflow | Field | Current | Target |
|----------|-------|---------|--------|
| `detection-failure-monitor` | gh-aw | `v0.87.8` | `v0.89.15` |
| `detection-stats-daily` | gh-aw | `v0.87.8` | `v0.89.15` |
| `gh-aw-issue-digest` | gh-aw | `v0.87.8` | `v0.89.15` |
| `gh-aw-parity-monitor` | gh-aw | `v0.87.8` | `v0.89.15` |
| `smoke-claude-standalone` | gh-aw | `v0.87.8` | `v0.89.15` |
| `smoke-codex-standalone` | gh-aw | `v0.87.8` | `v0.89.15` |
| `smoke-copilot-standalone` | gh-aw | `v0.87.8` | `v0.89.15` |
### How to fix
Regenerating the locks is a manual, human-reviewed step (pushing changes under
`.github/workflows/` needs a token with the `workflows` permission, which the
built-in `GITHUB_TOKEN` lacks). Follow the **update-workflow-versions** skill:
➡️ https://github.com/github/gh-aw-threat-detection/blob/main/skills/update-workflow-versions/SKILL.md
Generated by `.github/workflows/gh-aw-version-check.yml`.
Contributor guide
Research direction
Start by reading the update-workflow-versions skill linked in the issue, then inspect the compiled locks for detection-failure-monitor, detection-stats-daily, gh-aw-issue-digest, gh-aw-parity-monitor, smoke-claude-standalone, smoke-codex-standalone, and smoke-copilot-standalone. Regenerate the locks with gh-aw at v0.89.15 and the specified smoke-lock threat-detect version v0.5.1, then verify the workflow version check passes.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions
- Domain
- ci-cd
- Issue type
- Refactor
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Clearly specified
- Newbie friendliness
- 68/100