Migrate threat detection to external `threat-detect` binary behind feature flag#40166

Merged

pelikhan merged 33 commits into

mainfrom

copilot/migrate-gh-aw-inline-detection

Jun 19, 2026

Commits on Jun 19, 2026

Update threat-detect to v0.2.2 and fix binary name to threat-detect-linux-amd64

Copilot
and
pelikhan
authored
Enable gh-aw-detection feature flag in smoke-copilot and changeset workflows

Copilot
and
pelikhan
authored
Fix changeset detection: replace engine: false with empty config to enable detection job

Copilot
and
pelikhan
authored
Use bash/jq instead of Python for AWF chroot config patch in detection runs

Copilot
and
pelikhan
authored
Merge main and recompile workflows

Copilot
and
pelikhan
authored
Merge main and recompile lock workflows

Copilot
and
pelikhan
authored
Fix external detection job missing AWF install step

Copilot
and
pelikhan
authored
Recompile smoke-copilot and changeset lock workflows

Copilot
and
pelikhan
authored
Fix threat-detect invocation to use artifacts dir

Copilot
and
pelikhan
authored
Strengthen external detector invocation assertion

Copilot
and
pelikhan
authored
Install detection engine binary in external detector path

Copilot
and
pelikhan
authored
Log skipped engine installs and clarify AWF step predicate

Copilot
and
pelikhan
authored
Harden external detector engine install filtering and logging

Copilot
and
pelikhan
authored
Clarify external detector engine-install fallback behavior

Copilot
and
pelikhan
authored
Merge main and recompile workflows

Copilot
and
pelikhan
authored
Configure detection engine env like agent job

Copilot
and
pelikhan
authored
Align detection job engine env with agent job

Copilot
and
pelikhan
authored
Plan: handle recompile request

Copilot
and
pelikhan
authored
Fix detection false-fail by writing result JSON output

Copilot
and
pelikhan
authored
Mark gh-aw-detection feature as experimental

Copilot
and
pelikhan
authored
Warn that gh-aw-detection is experimental

Copilot
and
pelikhan
authored
Merge remote-tracking branch 'origin/main' into copilot/migrate-gh-aw-inline-detection

Copilot
and
pelikhan
authored
Merge main and recompile smoke-copilot workflow

Copilot
and
pelikhan
authored
Merge branch 'main' into copilot/migrate-gh-aw-inline-detection
pelikhan
authored
chore: outline plan for review feedback

Copilot
and
pelikhan
authored
Fix flaky pin expectation and refresh wasm golden outputs

Copilot
and
pelikhan
authored
Merge branch 'main' into copilot/migrate-gh-aw-inline-detection
pelikhan
authored
Fix actions-lock container ordering in failing CI run

Copilot
and
pelikhan
authored
Merge branch 'main' into copilot/migrate-gh-aw-inline-detection
pelikhan
authored