[pr-sous-chef] PR Sous Chef run report

[github-actions]

> ⚠️ **This is an automated status report. Do not assign this issue to a Copilot agent.**

Overview

Processed recent eligible non-draft PR candidates from the compact queue and nudged maintainable branches that were not blocked by active sous-chef cooldown rules. No formatter-generated changes were needed, and no review-thread cleanup actions were performed this run.

Critical Information

Counter	Value
processed	3
skipped_checks_running	0
skipped_last_comment_from_sous_chef	1
skipped_cooldown	0
nudged	2
branch_update_attempts	2
formatter_pushes	0
merge_main_scheduled	0
resolved_review_threads	0
dismissed_reviews	0

Nudged PRs

• Bump Claude, Copilot, Zizmor, and MCP Gateway defaults #50696 — Bump Claude, Copilot, Zizmor, and MCP Gateway defaults
• Add full-repo audit mode to pkg/linters/errormessage #50695 — Add full-repo audit mode to pkg/linters/errormessage

Recommendations

• Maintainers can inspect Add full-repo audit mode to pkg/linters/errormessage #50695 first because it still has a failed JS shard check.
• Deduplicate custom linter analyzer scaffolding #50700 was skipped because the latest comment was already a recent sous-chef nudge with @copilot.

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 12.3 AIC · ⌖ 9.76 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

• expires on Aug 8, 2026, 4:18 PM UTC-08:00

[github-actions]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

> ⚠️ **This is an automated status report. Do not assign this issue to a Copilot agent.**

Overview

Processed 3 eligible non-draft PRs from the compact candidate list and nudged all 3. No formatter pushes, review-thread resolutions, or stale-review dismissals were needed in this run.

Counters

Counter	Value
processed	3
skipped_checks_running	0
skipped_last_comment_from_sous_chef	0
skipped_cooldown	0
nudged	3
branch_update_attempts	3
formatter_pushes	0
merge_main_scheduled	0
resolved_review_threads	0
dismissed_reviews	0

Nudged PRs

• Add full-repo audit mode to pkg/linters/errormessage #50695 — Add full-repo audit mode to pkg/linters/errormessage
• threat-detection: drop macOS support from installer, add platform-mapping tests and compiler test coverage #50719 — threat-detection: drop macOS support from installer, add platform-mapping tests and compiler test coverage
• fix: propagate max-ai-credits to external detector AWF config #50721 — fix: propagate max-ai-credits to external detector AWF config

Generated by 👨🍳 PR Sous Chef · gpt54 · 10.7 AIC · ⊞ 5.9K · ◷
_{Comment /souschef to run again}

• expires on Aug 8, 2026, 4:56 PM UTC-08:00

[github-actions]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

Overview

Automated PR triage processed the top four candidate PRs from the compact input and nudged the two with actionable unresolved feedback. No formatter changes were needed on the checked branches, and no PR had active pending checks within the 1-hour skip window.

> ⚠️ **This is an automated status report. Do not assign this issue to a Copilot agent.**

Counter	Value
processed	4
skipped_checks_running	0
skipped_last_comment_from_sous_chef	1
skipped_cooldown	1
nudged	2
branch_update_attempts	2
formatter_pushes	0
merge_main_scheduled	0
resolved_review_threads	4
dismissed_reviews	0

Recommendations

Focus maintainer attention on PRs #50723 and #50717 after follow-up commits arrive. PRs #50721 and #50695 were skipped because a recent sous-chef/copilot interaction already exists within the cooldown rules.

Nudged PRs

• trial: fail and report rejected safe-output errors instead of always reporting success #50723 — trial: fail and report rejected safe-output errors instead of always reporting success
• threat-detection: fix GITHUB_STEP_SUMMARY unwritable in AWF sandbox (v0.4.0 exit 2) #50717 — threat-detection: fix GITHUB_STEP_SUMMARY unwritable in AWF sandbox (v0.4.0 exit 2)

Skipped PRs

• fix: propagate max-ai-credits to external detector AWF config #50721 — latest sous-chef + @copilot comment / cooldown window
• Add full-repo audit mode to pkg/linters/errormessage #50695 — latest sous-chef + @copilot follow-up / cooldown window

Generated by 👨🍳 PR Sous Chef · gpt54 · 20.1 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

• expires on Aug 8, 2026, 5:32 PM UTC-08:00

[github-actions]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

> ⚠️ **This is an automated status report. Do not assign this issue to a Copilot agent.**

Counter	Value
processed	2
skipped_checks_running	0
skipped_last_comment_from_sous_chef	0
skipped_cooldown	0
nudged	2
branch_update_attempts	2
formatter_pushes	0
merge_main_scheduled	0
resolved_review_threads	0
dismissed_reviews	0

Nudged PRs

• threat-detection: fix GITHUB_STEP_SUMMARY unwritable in AWF sandbox (v0.4.0 exit 2) #50717 threat-detection: fix GITHUB_STEP_SUMMARY unwritable in AWF sandbox (v0.4.0 exit 2)
• threat-detection: drop macOS support from installer, add platform-mapping tests and compiler test coverage #50719 threat-detection: drop macOS support from installer, add platform-mapping tests and compiler test coverage

Generated by 👨🍳 PR Sous Chef · gpt54 · 10.6 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

• expires on Aug 8, 2026, 6:35 PM UTC-08:00

[github-actions]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

⚠️ This is an automated status report. Do not assign this issue to a Copilot agent.

Overview

Processed 1 eligible non-draft PR and nudged 1 PR for unresolved review follow-up. No formatter push was made because make fmt failed locally due to the available Go toolchain being older than the repo requirement.

Critical Information

Counter	Value
processed	1
skipped_checks_running	0
skipped_last_comment_from_sous_chef	0
skipped_cooldown	0
nudged	1
branch_update_attempts	1
formatter_pushes	0
merge_main_scheduled	0
resolved_review_threads	0
dismissed_reviews	0

Nudged PRs

• Avoid storing MCP gateway stderr in artifacts #50744 — Avoid storing MCP gateway stderr in artifacts

Recommendations

The PR should address the three unresolved review threads, let checks settle, and then run the pr-finisher skill.

Notes

• Formatter step was attempted on copilot/avoid-mcp-stderr-artifact.
• make fmt failed because go.mod requires Go >= 1.26.5 while the environment provides Go 1.25.12 with GOTOOLCHAIN=local.
• gh pr checks was unavailable here due to a GraphQL access error, so pending-check detection fell back to the commit status API, which reported the head SHA as pending.

Generated by 👨🍳 PR Sous Chef · gpt54 · 7.24 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

• expires on Aug 8, 2026, 7:51 PM UTC-08:00

[github-actions]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

> ⚠️ **This is an automated status report. Do not assign this issue to a Copilot agent.**

Overview

Processed eligible pull requests for a lightweight triage pass. No PRs were nudged in this run because the only candidate still has a pending status check started less than 1 hour ago.

Critical Information

Counter	Value
processed	1
skipped_checks_running	1
skipped_last_comment_from_sous_chef	0
skipped_cooldown	0
nudged	0
branch_update_attempts	0
formatter_pushes	0
merge_main_scheduled	0
resolved_review_threads	0
dismissed_reviews	0

Recommendations

Wait for the in-flight check on PR #50746 to complete before posting any sous-chef nudge.

Processed PR details

• Prevent secret masking from MCP servers #50746 Prevent secret masking from MCP servers — skipped because commit status is pending and was updated within the last hour.

Generated by 👨🍳 PR Sous Chef · gpt54 · 4.42 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

• expires on Aug 8, 2026, 8:57 PM UTC-08:00

[github-actions]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

⚠️ This is an automated status report. Do not assign this issue to a Copilot agent.

Counter	Value
processed	5
skipped_checks_running	1
skipped_last_comment_from_sous_chef	0
skipped_cooldown	0
nudged	2
branch_update_attempts	2
formatter_pushes	0
merge_main_scheduled	0
resolved_review_threads	0
dismissed_reviews	0

Nudged PRs

• Prevent secrets from bypassing redaction in patch and bundle artifacts #50778 — Prevent secrets from bypassing redaction in patch and bundle artifacts
• fix(safe-outputs): restrict upload_artifact to canonical allowed roots, reject sensitive paths #50779 — fix(safe-outputs): restrict upload_artifact to canonical allowed roots, reject sensitive paths

Skipped PRs

• Stop generating MCP gateway stderr logs #50765 — checks in progress less than 1h old
• fix: sanitize secret-bearing data before writing GitHub step summaries #50777 — latest maintainer request is already queued for @copilot follow-up
• Redact sensitive MCP data at logging and audit boundaries #50775 — no fresh maintainer/author follow-up signal beyond existing review state in this run

Generated by 👨🍳 PR Sous Chef · gpt54 · 22.6 AIC · ⊞ 5.9K · ◷
_{Comment /souschef to run again}

• expires on Aug 8, 2026, 10:11 PM UTC-08:00

[github-actions]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

> ⚠️ **This is an automated status report. Do not assign this issue to a Copilot agent.**

Overview

Processed 1 eligible pull request candidate and nudged 1 PR for maintainer follow-up. No pending checks blocked action in this run.

Critical Information

Counter	Value
processed	1
skipped_checks_running	0
skipped_last_comment_from_sous_chef	0
skipped_cooldown	0
nudged	1
branch_update_attempts	1
formatter_pushes	0
merge_main_scheduled	0
resolved_review_threads	0
dismissed_reviews	0

Nudged PRs

• Strip URL userinfo and stop logging complete rejected URLs #50776 — Strip URL userinfo and stop logging complete rejected URLs

Recommendations

Maintainer should inspect the remaining unresolved review threads and the stuck JavaScript test process referenced on the PR before merge.

Generated by 👨🍳 PR Sous Chef · gpt54 · 8.87 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

• expires on Aug 8, 2026, 11:12 PM UTC-08:00

[github-actions]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

> ⚠️ **This is an automated status report. Do not assign this issue to a Copilot agent.**

Counter	Value
processed	1
skipped_checks_running	0
skipped_last_comment_from_sous_chef	0
skipped_cooldown	0
nudged	1
branch_update_attempts	1
formatter_pushes	0
merge_main_scheduled	0
resolved_review_threads	0
dismissed_reviews	0

Nudged PRs

• Strip URL userinfo and stop logging complete rejected URLs #50776 — Strip URL userinfo and stop logging complete rejected URLs

Generated by 👨🍳 PR Sous Chef · gpt54 · 6.67 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

• expires on Aug 9, 2026, 12:07 AM UTC-08:00

[github-actions]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

> ⚠️ **This is an automated status report. Do not assign this issue to a Copilot agent.**

| Counter | Value |
|---|---|
| processed | 1 |
| skipped_checks_running | 0 |
| skipped_last_comment_from_sous_chef | 0 |
| skipped_cooldown | 0 |
| nudged | 0 |
| branch_update_attempts | 1 |
| formatter_pushes | 0 |
| merge_main_scheduled | 0 |
| resolved_review_threads | 6 |
| dismissed_reviews | 1 |

<details><summary>Nudged PRs</summary>

None.

</details>

Generated by 👨🍳 PR Sous Chef · gpt54 · 12.6 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

• expires on Aug 9, 2026, 1:10 AM UTC-08:00

[github-actions]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

> ⚠️ **This is an automated status report. Do not assign this issue to a Copilot agent.**

Counter	Value
processed	2
skipped_checks_running	0
skipped_last_comment_from_sous_chef	0
skipped_cooldown	0
nudged	2
branch_update_attempts	2
formatter_pushes	0
merge_main_scheduled	0
resolved_review_threads	0
dismissed_reviews	0

Nudged PRs

• [instructions] Sync instruction files with release v0.85.4 #50824 — [instructions] Sync instruction files with release v0.85.4
• Strip URL userinfo and stop logging complete rejected URLs #50776 — Strip URL userinfo and stop logging complete rejected URLs

Generated by 👨🍳 PR Sous Chef · gpt54 · 7.38 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

• expires on Aug 9, 2026, 2:09 AM UTC-08:00

[github-actions]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

⚠️ This is an automated status report. Do not assign this issue to a Copilot agent.

Overview

Processed 2 eligible non-draft PR candidates from the compact queue. No new nudges were posted because both PR head commits still show pending checks started recently enough to trigger the running-checks skip rule.

Critical information

Counter	Value
processed	2
skipped_checks_running	2
skipped_last_comment_from_sous_chef	0
skipped_cooldown	0
nudged	0
branch_update_attempts	0
formatter_pushes	0
merge_main_scheduled	0
resolved_review_threads	0
dismissed_reviews	0

Skipped PR details

• [instructions] Sync instruction files with release v0.85.4 #50824 — [instructions] Sync instruction files with release v0.85.4
  • head sha 2f097a86bd8909e5406c64bc3ceb2afa04c0f827
  • combined status is pending
• Strip URL userinfo and stop logging complete rejected URLs #50776 — Strip URL userinfo and stop logging complete rejected URLs
  • head sha a5819d73074a071ebd8fc3eefb7d6ecdff902d24
  • combined status is pending

Recommendations

Wait for the currently pending checks to finish before sending another sous-chef nudge. Once checks are no longer freshly running, PR #50776 is the next likely candidate because it still has unresolved review threads with follow-up replies.

Run metadata

• Run: https://github.com/github/gh-aw/actions/runs/31095553824
• Candidate source: /tmp/gh-aw/agent/pr-sous-chef-candidates-compact.json

Generated by 👨🍳 PR Sous Chef · gpt54 · 5.84 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

• expires on Aug 9, 2026, 3:06 AM UTC-08:00

[github-actions]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

⚠️ This is an automated status report. Do not assign this issue to a Copilot agent.

Counter	Value
processed	3
skipped_checks_running	1
skipped_last_comment_from_sous_chef	0
skipped_cooldown	0
nudged	2
branch_update_attempts	2
formatter_pushes	0
merge_main_scheduled	0
resolved_review_threads	0
dismissed_reviews	0

Nudged PRs

• [instructions] Sync instruction files with release v0.85.4 #50824 — [instructions] Sync instruction files with release v0.85.4
• Strip URL userinfo and stop logging complete rejected URLs #50776 — Strip URL userinfo and stop logging complete rejected URLs

Skipped PRs

• [docs] Update documentation for features from 2026-08-06 #50832 — checks_running_recently

Generated by 👨🍳 PR Sous Chef · gpt54 · 7.55 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

• expires on Aug 9, 2026, 3:56 AM UTC-08:00

[github-actions]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

> ⚠️ **This is an automated status report. Do not assign this issue to a Copilot agent.**

Counter	Value
processed	1
skipped_checks_running	0
skipped_last_comment_from_sous_chef	0
skipped_cooldown	0
nudged	1
branch_update_attempts	1
formatter_pushes	0
merge_main_scheduled	0
resolved_review_threads	0
dismissed_reviews	0

Nudged PRs

• [eslint-miner] Add require-fetch-response-body-try-catch ESLint rule #50828 — [eslint-miner] Add require-fetch-response-body-try-catch ESLint rule

Generated by 👨🍳 PR Sous Chef · gpt54 · 5.92 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

• expires on Aug 9, 2026, 4:38 AM UTC-08:00