🏥 Organization Health Report - 2026-08-24

[github-actions[bot]]

Important scope note: The GitHub Search API available to this run only indexed activity from ~14 repositories (dominated by gh-aw, gh-aw-firewall, gh-aw-mcpg, gh-aw-threat-detection, and a handful of others such as annotated-logger, deployment-tracker, awesome-copilot, rust-gems, eslint-plugin-github, copilot-sdk, accessibility-alt-text-bot, glb-director), not the full github organization (which has hundreds of public repos). Broader org-wide search queries returned artificially low total_count values (search index scope limitation in this environment), so this report reflects a partial, sandboxed sample rather than a complete organization health picture. Treat the numbers below as indicative of the accessible subset only.

📊 Volume Metrics (accessible subset)

Overall Status

Metric	Count
Total Open Issues	69
Total Closed Issues	15
Total Open PRs	20
Total Closed PRs	69

(Note: all issues/PRs retrieved fell within the last 30 days per the search page returned, so 7d/30d breakdowns below reflect the same underlying single-page sample of 84 issues + 89 PRs.)

Recent Activity (7 Days, within sample)

Metric	Count
Issues Opened	84
Issues Closed	15
PRs Opened	89
PRs Closed	69

Recent Activity (30 Days, within sample)

Metric	Count
Issues Opened	84
Issues Closed	15
PRs Opened	89
PRs Closed	69

🏆 Top Active Repositories (in sample)

Repository	Issues	PRs	Comments	Activity Score
gh-aw	67	72	240	470.0
gh-aw-firewall	6	3	102	72.0
gh-aw-mcpg	7	3	4	25.0
awesome-copilot	0	3	0	9.0
gh-aw-threat-detection	4	0	1	8.5

gh-aw dominates activity by a wide margin — it is clearly the most actively developed and discussed repository in the sample, generating automated issue/PR volume from its own agentic workflow tooling (bot-authored issues, dependency bumps, and AI-assisted PRs).

Top Active Authors (in sample)

Author	Issues Opened	PRs Opened	Activity Score
github-actions[bot]	83	33	265
Copilot	0	46	138
dependabot[bot]	0	6	18
lpcox	1	1	5
aneubeck	0	1	3
roji	0	1	3
mnkiefer	0	1	3

Automation accounts (github-actions[bot], Copilot, dependabot[bot]) account for the vast majority of opened items — expected for a repo whose product is agentic workflow automation. Human contributors in the sample are few but present (lpcox, aneubeck, roji, mnkiefer).

🔥 High-Activity Unresolved Items

Hot Issues (Need Attention)

Issue	Repository	Comments	Link
#55308: [aw] AI Moderator failed	gh-aw	5	View
#11766: [aw] No-Op Runs	gh-aw-mcpg	3	View
#55320: [P1] Daily Container Image Security Scan blocked 6 days straight by 51 Critical CVEs	gh-aw	1	View
#7686: [aw] Detection Runs	gh-aw-firewall	1	View
#55311: Enable CI enforcement for 4 confirmed-clean Go linters	gh-aw	1	View
#55298: eslint-factory guard exemption	gh-aw	1	View
#55279: [aw] Daily Go Test Parallelizer failed	gh-aw	1	View
#55269: Align step names in memory tools and DeepSeek Harness	gh-aw	1	View
#55257: [aw] Smoke Claude on Copilot failed	gh-aw	1	View
#7682: [aw] Contribution Check hit engine rate limit (HTTP 429)	gh-aw-firewall	1	View

⚠️ Notable: #55320 flags a P1 security issue — a Daily Container Image Security Scan has been blocked for 6 consecutive days by 51 unresolved critical CVEs in an unpinned ghcr.io/oraios/se... image. This deserves prompt maintainer attention.

Hot PRs (Need Review)

PR	Repository	Comments	Link
#7679: fix: preserve agent startup with restricted tmp	gh-aw-firewall	68	View
#55241: Treat AWF proxy's HTTP 403 max-AI-credits rejection as trusted budget-abort evidence	gh-aw	14	View
#55256: Infer Claude GitHub provider from copilot/... models	gh-aw	12	View
#55271: Handle read-only awf-reflect persistence failures	gh-aw	7	View
#55285: Replace create-pull-request pre-create with steer	gh-aw	4	View
#55155: feat: add value grader	gh-aw	2	View
#55287: Add generated-by footer to steering pull requests	gh-aw	1	View
#159: Bump dev-dependencies group (9 updates)	annotated-logger	1	View
#123: Bump minor-patch group (3 updates)	deployment-tracker	0	View
#122: Bump golang 1.26.6→1.27.0-alpine3.23	deployment-tracker	0	View

PR #7679 (gh-aw-firewall) has by far the most discussion (68 comments), suggesting an active, possibly contentious, or complex review in progress — worth checking in on.

⚠️ Items Needing Attention

• Stale Issues (30+ days old, no update in 7+ days): 0 in sample
• Stale PRs (30+ days old, no update in 7+ days): 0 in sample
• Unassigned Open Issues: 64 — the large majority of open issues have no assignee
• Unlabeled Open Issues: 4

The high unassigned-issue count (64 of 69 open) is the most actionable systemic gap: most open issues, including automated failure-report issues ([aw] ... failed), currently have nobody assigned to triage or resolve them.

💡 Commentary and Recommendations

1. Triage the unassigned backlog. 64 of 69 open issues have no assignee. Even a lightweight rotation (e.g., weekly triage owner) would materially improve response times, especially for the many [aw] ... failed workflow-failure issues that appear to be auto-filed.
2. Address the P1 security scan blocker ([aw-failures] [P1] Daily Container Image Security Scan blocked 6 days straight by 51 Critical CVEs in unpinned ghcr.io/oraios/se [Content trun #55320) promptly — 51 critical CVEs blocking a security scan for 6 days is a compounding risk.
3. Review PR Refactor inline scripts to use centralized setup_globals helper #7679 — its high comment count (68) suggests either a complex fix or unresolved review friction; a maintainer should check status and unblock if stalled.
4. Given the volume of bot-generated content (github-actions[bot], Copilot, dependabot[bot] account for the top 3 "authors"), consider tuning noise-reduction (e.g., auto-closing resolved smoke-test issues, batching dependency-bump PRs) to keep the human-relevant signal clear.
5. Re-run this analysis with broader search access (e.g., GitHub App/PAT with org-wide read scope, or the GitHub MCP server's dedicated search tools) to get a true organization-wide picture — the current sandboxed GITHUB_TOKEN only indexed ~14 of the org's 100+ public repositories.

Full Data and Methodology

Data Collection

• Date: 2026-08-24
• Repositories discovered via search/repositories: 100 (public, non-archived, capped at one page; org has more)
• Repositories with indexed activity in this sandbox: ~14 (gh-aw, gh-aw-firewall, gh-aw-mcpg, gh-aw-threat-detection, annotated-logger, awesome-copilot, copilot-sdk, deployment-tracker, eslint-plugin-github, glb-director, rust-gems, accessibility-alt-text-bot)
• Issues analyzed: 84 (from a single is:issue search page)
• PRs analyzed: 89 (from a single is:pr search page)

Methodology

• Data collected using gh api search/issues and gh api search/repositories (GitHub Search API)
• Broader org:github queries with date filters (created:>=YYYY-MM-DD) returned unexpectedly low/degenerate total_count values in this sandbox, indicating the GitHub Search index available to the run's token is scoped to a limited repo set rather than the full org — this is a hard environment limitation, not a data-processing bug
• Encountered and recovered from a GitHub secondary rate limit (403) during exploratory count queries; resolved via a 60s cooldown
• Analyzed using pure-Python (pandas unavailable in-session within time budget; equivalent groupby/aggregation logic implemented manually)
• Activity scores: issues×2 + prs×3 + comments×0.5 (repos), issues_opened×2 + prs_opened×3 (authors)
• Stale = open, created 30+ days ago, not updated in the last 7 days

Generated by 📊 Organization Health Report · copilot · auto · 83.3 AIC · ⌖ 8.85 AIC · ⊞ 13.2K · ◷

• expires on Aug 25, 2026, 12:48 AM UTC-08:00