[docs] Update glossary - daily scan

[github-actions]

Warning

threat detection engine error
The threat detection engine encountered an error and could not complete analysis. This is a tooling failure, not a security finding.

Details

The threat detection engine failed to produce results.

Review the workflow run logs for details.

Summary

Adds a new glossary entry documenting the per-handler github-app: override for safe outputs.

Changes

• docs/src/content/docs/reference/glossary.md: Added a new term, Per-Handler GitHub App Override (safe-outputs.<type>.github-app), describing:
  • A type-specific github-app: field letting an individual safe output handler mint its own scoped GitHub App installation token instead of using the shared/global credential.
  • The compiler emits a dedicated token-minting step ({handler-key}-app-token) when this field is set.
  • The handler prefers this dedicated token over the shared safe-outputs.github-token or the global safe-outputs.github-app token; handlers without an override fall back to the global App.
  • Enables least-privilege separation between output types (e.g. add-comment scoped to issues:write, dispatch-workflow scoped to actions:write).
  • Links to the Safe Outputs Specification.

Impact

Documentation-only change; no code or behavior changes. Improves discoverability of an existing (or newly specified) feature via the glossary.

Generated by PR Description Updater for #49318 · auto · 17.1 AIC · ⊞ 6.8K · ◷

[gh-aw-bot]

Warning

threat detection engine error
The threat detection engine encountered an error and could not complete analysis. This is a tooling failure, not a security finding.

Details

The threat detection engine failed to produce results.

Review the workflow run logs for details.

@copilot please run the pr-finisher skill on this PR, bring the branch up to date if needed, verify whether any checks need rerunning, and finish any remaining follow-up before handoff. Run details: https://github.com/github/gh-aw/actions/runs/30627168508

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 10.8 AIC · ⊞ 5.7K · ◷
_{Comment /souschef to run again}

[Copilot]

[!WARNING]
threat detection engine error
The threat detection engine encountered an error and could not complete analysis. This is a tooling failure, not a security finding....

PR finisher complete. Summary:

• ✅ Reviews — No open review threads. No code changes required.
• ✅ Checks (local) — make fmt, make lint (0 errors, pre-existing warnings only), make agent-report-progress-no-test (266 workflows compiled, 0 errors), and make test-unit-all all pass.
• ❓ Checks (CI) — Stale after agent push; needs human re-trigger. Prior runs for Doc Build, AI Moderator, Content Moderation, and Agentic Commands show action_required — this is an environment protection gate requiring maintainer approval, not a code issue. The threat detection engine error was a tooling failure (not a security finding). These are not locally reproducible — a maintainer must approve the queued workflow runs.
• ✅ Mergeable — PR is open, not draft, not BEHIND, not CONFLICTING.

Actions taken: None — local validation was already green and no code changes were needed.

Hand-off: A maintainer needs to approve the pending environment-protected workflow runs (Doc Build, AI Moderator, Content Moderation, Agentic Commands) before merge.

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.84.1