Add gh-aw-detection: true to 7 high-frequency workflows lacking anomaly/prompt-injection detection

[Copilot]

7 high-frequency workflows (>10 runs/24h) were missing gh-aw-detection: true in their frontmatter, leaving them without anomaly and prompt-injection detection coverage.

Changes

• Added features:\n gh-aw-detection: true to the frontmatter of all 7 affected workflows, placed before the sandbox: section per existing convention:
  • design-decision-gate.md
  • impeccable-skills-reviewer.md
  • issue-monster.md
  • mattpocock-skills-reviewer.md
  • pr-code-quality-reviewer.md
  • pr-sous-chef.md
  • pr-description-caveman.md (PR Description Updater)
• Regenerated all corresponding .lock.yml files via make recompile

Example diff (representative)

+features:
+  gh-aw-detection: true
 sandbox:
   agent:
     sudo: false

• Fixes [Code Quality] Enable gh-aw-detection on 7 high-frequency workflows lacking anomaly/prompt-injection detection #49018

---

Run: https://github.com/github/gh-aw/actions/runs/30523835792

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 4.89 AIC · ⌖ 7.33 AIC · ⊞ 8.7K · ◷
_{Comment /souschef to run again}

[Copilot]

Pull request overview

Enables anomaly and prompt-injection detection for seven frequently run agentic workflows.

Changes:

• Added gh-aw-detection: true to each workflow’s frontmatter.
• Regenerated corresponding lock files with the external threat-detection flow.

Show a summary per file

File	Description
.github/workflows/pr-sous-chef.md	Enables detection.
.github/workflows/pr-sous-chef.lock.yml	Updates compiled workflow.
.github/workflows/pr-description-caveman.md	Enables detection.
.github/workflows/pr-description-caveman.lock.yml	Updates compiled workflow.
.github/workflows/pr-code-quality-reviewer.md	Enables detection.
.github/workflows/pr-code-quality-reviewer.lock.yml	Updates compiled workflow.
.github/workflows/mattpocock-skills-reviewer.md	Enables detection.
.github/workflows/mattpocock-skills-reviewer.lock.yml	Updates compiled workflow.
.github/workflows/issue-monster.md	Enables detection.
.github/workflows/issue-monster.lock.yml	Updates compiled workflow.
.github/workflows/impeccable-skills-reviewer.md	Enables detection.
.github/workflows/impeccable-skills-reviewer.lock.yml	Updates compiled workflow.
.github/workflows/design-decision-gate.md	Enables detection.
.github/workflows/design-decision-gate.lock.yml	Updates compiled workflow.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 14/14 changed files
• Comments generated: 0
• Review effort level: Medium

[github-actions]

Triage Summary

• Category: chore
• Risk: medium
• Priority Score: 43/100 (impact 25 + urgency 12 + quality 6)
• Recommended Action: defer

Adds gh-aw-detection to 7 high-frequency workflows. PR is in dirty (merge-conflict) state — needs rebase before review.

Generated by 🔧 PR Triage Agent · auto · 54.9 AIC · ⌖ 5.64 AIC · ⊞ 7.9K · ◷

[gh-aw-bot]

@copilot please run the pr-finisher skill, address unresolved review feedback if any, and rerun checks once the branch is up to date.

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 4.89 AIC · ⌖ 7.33 AIC · ⊞ 8.7K · ◷
_{Comment /souschef to run again}

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.84.1