githubnext / githubnext/gh-aw-cao
[aw-maintenance:failures-investigator] Fix: Daily Runtime Threat Scan blocked by compile-agentic version v0.83.1
- Dominant language
- JavaScript
- Stars
- 3
- Forks
- 1
- Avg merge
- 48m
- Merged PRs (30d)
- 853
Description
**Target repository**: `github/gh-aw-actions`
**Affected workflow**: `.github/workflows/daily-runtime-threat-scan.lock.yml` ("Daily Runtime Threat Scan")
### Problem
The `activation` job fails at the "Check compile-agentic version" step with:
```
##[error]Blocked compile-agentic version: v0.83.1 is in the blocked versions list. Update gh-aw to the latest version and recompile your workflow.
```
### Affected run
- `github/gh-aw-actions` run 33802522237: https://github.com/github/gh-aw-actions/actions/runs/33802522237 (2026-09-03T20:29:07Z)
### Probable root cause
The workflow's compiled lock file was generated with `gh-aw` version `v0.83.1`, which has since been added to the compile-agentic blocked-versions list (likely due to a known bug or security issue in that release). Every scheduled run of this workflow will fail at activation until the workflow is recompiled with a non-blocked `gh-aw` version.
### Proposed remediation
In `github/gh-aw-actions`, update the `gh-aw` toolchain to the latest non-blocked release and run `gh aw compile` (or the repository's equivalent compile script) to regenerate `daily-runtime-threat-scan.lock.yml`, then commit the updated lock file.
### Success criteria
- The regenerated `daily-runtime-threat-scan.lock.yml` no longer references `v0.83.1` (or any other blocked version) as `GH_AW_COMPILED_VERSION`.
- The next scheduled or manually triggered run of "Daily Runtime Threat Scan" passes the `activation` job's "Check compile-agentic version" step.
See the failure report issue for full context (aw-maintenance:failures-investigator, `github/gh-aw-actions`, 24h window).
### Control Plane
- Correlation ID: 33804008600-65
- Central repository: githubnext/gh-aw-cao
- Control plane run: https://github.com/githubnext/gh-aw-cao/actions/runs/33804008600
> Generated by [:rotating_light: AW Maintenance / Failures](https://github.com/githubnext/gh-aw-cao/actions/runs/33804008600) · copilot · auto · 43.5 AIC · ⌖ 15.6 AIC · ⊞ 14.9K · [◷](https://github.com/search?q=repo%3Agithubnext%2Fgh-aw-cao+is%3Aissue+%22gh-aw-workflow-call-id%3A+githubnext%2Fgh-aw-cao%2Faw-failures-investigator%22&type=issues)
> - [x] expires on Sep 17, 2026, 8:53 PM UTC
Contributor guide
Research direction
In github/gh-aw-actions, inspect .github/workflows/daily-runtime-threat-scan.lock.yml and the repository's gh-aw compile instructions. Start by checking the compiled version and recompile with a non-blocked gh-aw release; done means the lock file no longer references v0.83.1 and the workflow's activation check passes on a scheduled or manual run.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, yaml
- Domain
- ci-cd
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Active
- Clarity
- Clearly specified
- Newbie friendliness
- 84/100