Enable threat detection for Q and ESLint Monster workflows

[Copilot]

Q and ESLint Monster lacked the fleet-standard prompt-injection and threat-detection feature despite running frequently.

• Workflow configuration
  • Enable detection in both workflows:

    features:
      gh-aw-detection: true

• Generated workflows
  • Regenerate the corresponding .lock.yml files with detection jobs and metadata.

• Fixes [deep-report] Add gh-aw-detection: true to Q and ESLint Monster workflows #51810

[github-actions]

Thanks @Copilot 👋 for picking up this work from the Deep Report analysis! The goal is clear: add gh-aw-detection: true to the Q and ESLint Monster workflows, then recompile.

A few things to help this move forward:

• No changes yet — The PR is marked as draft with 0 lines changed. To move toward review-ready, make the actual edits to .github/workflows/q.md and .github/workflows/eslint-monster.md (adding features.gh-aw-detection: true as described in issue [deep-report] Add gh-aw-detection: true to Q and ESLint Monster workflows #51810) and run gh aw compile to regenerate lock files.
• Add test coverage — After making the changes, verify the recompiled workflows are valid by running the compilation step again.
• Update PR description — Once changes are committed, replace the draft description with a clear summary of what changed and why.

Once changes are pushed and tests pass, mark the PR as ready for review by removing the [WIP] prefix.

Add gh-aw-detection feature to Q and ESLint Monster workflows:
1. Edit .github/workflows/q.md frontmatter to add:
   features:
     gh-aw-detection: true
2. Edit .github/workflows/eslint-monster.md frontmatter to add the same features section.
3. Run gh aw compile from the repository root to regenerate the .lock.yml files.
4. Verify the changes are reflected in the compiled outputs.

Generated by ✅ Contribution Check · auto · 54 AIC · ⌖ 3.35 AIC · ⊞ 8.8K · ◷

[Copilot]

Pull request overview

Enables fleet-standard threat detection for Q and ESLint Monster, resolving #51810.

Changes:

• Enables gh-aw-detection in both workflow definitions.
• Regenerates lock files with updated detection execution and metadata.

Show a summary per file

File	Description
.github/workflows/q.md	Enables threat detection for Q.
.github/workflows/q.lock.yml	Regenerates Q’s compiled workflow.
.github/workflows/eslint-monster.md	Enables threat detection for ESLint Monster.
.github/workflows/eslint-monster.lock.yml	Regenerates ESLint Monster’s compiled workflow.

Review details

Tip

Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

• Files reviewed: 4/4 changed files
• Comments generated: 0
• Review effort level: Balanced

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.86.2