From ef360c8566e1787bdf97a8eed9502266b3981f10 Mon Sep 17 00:00:00 2001 From: gh-aw agent Date: Tue, 24 Feb 2026 04:23:22 +0000 Subject: [PATCH] docs: fix magic secret command and add threat-detection runs-on field - Fix incorrect secret name in triggering-ci.mdx magic secret section: the command showed MY_CI_TRIGGER_PAT but the correct name is GH_AW_CI_TRIGGER_TOKEN (introduced in #17997) - Add missing `runs-on` field to threat-detection.md configuration table, documenting the detection job runner override added in #17979 Co-Authored-By: Claude Sonnet 4.6 --- docs/src/content/docs/reference/threat-detection.md | 1 + docs/src/content/docs/reference/triggering-ci.mdx | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/src/content/docs/reference/threat-detection.md b/docs/src/content/docs/reference/threat-detection.md index cfbb69a354..abe565e5d7 100644 --- a/docs/src/content/docs/reference/threat-detection.md +++ b/docs/src/content/docs/reference/threat-detection.md @@ -86,6 +86,7 @@ safe-outputs: | `enabled` | boolean | Enable or disable detection (default: `true` when safe-outputs exist) | | `prompt` | string | Custom instructions appended to default detection prompt | | `engine` | string/object/false | AI engine config (`"copilot"`, full config object, or `false` for no AI) | +| `runs-on` | string/array/object | Runner for the detection job (default: inherits from workflow `runs-on`) | | `steps` | array | Additional GitHub Actions steps to run after AI analysis | ## AI-Based Detection (Default) diff --git a/docs/src/content/docs/reference/triggering-ci.mdx b/docs/src/content/docs/reference/triggering-ci.mdx index 313b5d9658..9e6c097c1c 100644 --- a/docs/src/content/docs/reference/triggering-ci.mdx +++ b/docs/src/content/docs/reference/triggering-ci.mdx @@ -72,7 +72,7 @@ safe-outputs: Alternatively, you can set the magic secret `GH_AW_CI_TRIGGER_TOKEN` to a suitable PAT (see the above guide for creating one). This secret name is known to GitHub Agentic Workflows and does not need to be explicitly referenced in your workflow. ```bash wrap -gh aw secrets set MY_CI_TRIGGER_PAT --value "" +gh aw secrets set GH_AW_CI_TRIGGER_TOKEN --value "" ``` ## Alternative: Full Token Override