audit: count workflow failure when telemetry is unavailable (#42046)

Author: Copilot

pkg/cli/audit.go

@@ -747,6 +747,9 @@ func applyAuditMetrics(run WorkflowRun, results auditAnalysisResults) WorkflowRu
 	run.TokenUsage = results.metrics.TokenUsage
 	run.Turns = results.metrics.Turns
 	run.ErrorCount = results.failedJobCount
+	if run.Conclusion == "failure" && run.ErrorCount == 0 {
+		run.ErrorCount = 1
+	}
 	run.WarningCount = 0
 	run.SafeItemsCount = results.safeItemsCount
 	return run

pkg/cli/audit_report.go

@@ -299,6 +299,9 @@ func buildAuditData(processedRun ProcessedRun, metrics LogMetrics, mcpToolUsage
 		ErrorCount:   run.ErrorCount,
 		WarningCount: run.WarningCount,
 	}
+	if run.Conclusion == "failure" && metricsData.ErrorCount == 0 {
+		metricsData.ErrorCount = 1
+	}
 
 	needsFallbackMetrics := metricsData.TokenUsage == 0 || metricsData.Turns == 0
 	needsFallbackEngineConfig := run.LogsPath != "" && findAwInfoPath(run.LogsPath) == ""

pkg/cli/audit_test.go

@@ -263,6 +263,32 @@ func TestBuildAuditData(t *testing.T) {
 	}
 }
 
+func TestBuildAuditDataCountsFailedWorkflowWithoutTelemetryAsError(t *testing.T) {
+	processedRun := ProcessedRun{
+		Run: WorkflowRun{
+			DatabaseID:   123456,
+			WorkflowName: "Failed Workflow",
+			Status:       "completed",
+			Conclusion:   "failure",
+			LogsPath:     testutil.TempDir(t, "test-*"),
+		},
+	}
+
+	auditData := buildAuditData(processedRun, LogMetrics{}, nil)
+
+	assert.Equal(t, 1, auditData.Metrics.ErrorCount, "failed workflow should contribute at least one error")
+}
+
+func TestApplyAuditMetricsCountsWorkflowFailureWithoutTelemetry(t *testing.T) {
+	run := WorkflowRun{
+		Conclusion: "failure",
+	}
+
+	updated := applyAuditMetrics(run, auditAnalysisResults{})
+
+	assert.Equal(t, 1, updated.ErrorCount, "failed workflow should contribute at least one error")
+}
+
 func TestDescribeFile(t *testing.T) {
 	tests := []struct {
 		filename    string