githubnext / githubnext/gh-aw-cao

[aw-maintenance:failures-investigator] Fix: Daily Runtime Threat Scan blocked by compile-agentic version v0.83.1

Open Beginner friendly
#839 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
3
Forks
1
Avg merge
48m
Merged PRs (30d)
853

Description

**Target repository**: `github/gh-aw-actions`
**Affected workflow**: `.github/workflows/daily-runtime-threat-scan.lock.yml` ("Daily Runtime Threat Scan")

### Problem
The `activation` job fails at the "Check compile-agentic version" step with:

```
##[error]Blocked compile-agentic version: v0.83.1 is in the blocked versions list. Update gh-aw to the latest version and recompile your workflow.
```

### Affected run
- `github/gh-aw-actions` run 33802522237: https://github.com/github/gh-aw-actions/actions/runs/33802522237 (2026-09-03T20:29:07Z)

### Probable root cause
The workflow's compiled lock file was generated with `gh-aw` version `v0.83.1`, which has since been added to the compile-agentic blocked-versions list (likely due to a known bug or security issue in that release). Every scheduled run of this workflow will fail at activation until the workflow is recompiled with a non-blocked `gh-aw` version.

### Proposed remediation
In `github/gh-aw-actions`, update the `gh-aw` toolchain to the latest non-blocked release and run `gh aw compile` (or the repository's equivalent compile script) to regenerate `daily-runtime-threat-scan.lock.yml`, then commit the updated lock file.

### Success criteria
- The regenerated `daily-runtime-threat-scan.lock.yml` no longer references `v0.83.1` (or any other blocked version) as `GH_AW_COMPILED_VERSION`.
- The next scheduled or manually triggered run of "Daily Runtime Threat Scan" passes the `activation` job's "Check compile-agentic version" step.

See the failure report issue for full context (aw-maintenance:failures-investigator, `github/gh-aw-actions`, 24h window).

### Control Plane
- Correlation ID: 33804008600-65
- Central repository: githubnext/gh-aw-cao
- Control plane run: https://github.com/githubnext/gh-aw-cao/actions/runs/33804008600

> Generated by [:rotating_light: AW Maintenance / Failures](https://github.com/githubnext/gh-aw-cao/actions/runs/33804008600) · copilot · auto · 43.5 AIC · ⌖ 15.6 AIC · ⊞ 14.9K · [◷](https://github.com/search?q=repo%3Agithubnext%2Fgh-aw-cao+is%3Aissue+%22gh-aw-workflow-call-id%3A+githubnext%2Fgh-aw-cao%2Faw-failures-investigator%22&type=issues)
> - [x] expires on Sep 17, 2026, 8:53 PM UTC

Contributor guide

Open the contributing guide

Research direction

In github/gh-aw-actions, inspect .github/workflows/daily-runtime-threat-scan.lock.yml and the repository's gh-aw compile instructions. Start by checking the compiled version and recompile with a non-blocked gh-aw release; done means the lock file no longer references v0.83.1 and the workflow's activation check passes on a scheduled or manual run.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, yaml
Domain
ci-cd
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Active
Clarity
Clearly specified
Newbie friendliness
84/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.