Repository navigation
[aw] Detection Runs #9894
Description
This issue tracks all runs where threat detection flagged problems in agentic workflows in this repository. Each workflow run that completes with a detection warning or failure posts a comment here.
What is a Detection Problem?
A detection problem occurs when the threat detection system either:
- Detects potential security threats (prompt injection, secret leak, malicious patch)
- Fails to produce results (agent failure, parse error)
Comments distinguish threat_finding, detector_execution_failure, detector_result_invalid, and detection_outcome_unknown using the structured detection reason. Detector failures leave the security assessment incomplete; they do not prove a threat or a clean result. Comments omit agent text and detection payloads.
When continue-on-error: true (the default), these problems produce warnings and safe outputs still proceed. When continue-on-error: false, they block safe outputs entirely.
How This Helps
This issue helps you:
- Track workflows where threat detection raised concerns
- Review patterns of detection warnings or failures
- Identify false positives or recurring issues with threat detection
- Monitor the health of the threat detection system
Resources
Tip
To configure threat detection behavior, update the frontmatter:
safe-outputs:
threat-detection:
continue-on-error: true # Warnings only (default)
# continue-on-error: false # Strict mode — block safe outputsThis issue is automatically managed by GitHub Agentic Workflows. Do not close this issue manually.
No action to take - Do not assign to an agent.
- expires on Nov 19, 2026, 9:28 PM UTC
Activity
github-actions commentedon Oct 20, 2026
Update CHANGELOG
Outcome:
detector_execution_failureThe detector failed to complete. Security assessment is incomplete; this is not evidence of a threat or a clean result.
Run details
failureagent_failureThe conclusion reflects the configured detection policy; it does not change the outcome category. Agent text and detection payloads are omitted.
github-actions commentedon Oct 21, 2026
Update CHANGELOG
Outcome:
detector_execution_failureThe detector failed to complete. Security assessment is incomplete; this is not evidence of a threat or a clean result.
Run details
failureagent_failureThe conclusion reflects the configured detection policy; it does not change the outcome category. Agent text and detection payloads are omitted.