diff --git a/.fullsend/harness/triage-security.yaml b/.fullsend/harness/triage-security.yaml index 4c25a0c42..342851282 100644 --- a/.fullsend/harness/triage-security.yaml +++ b/.fullsend/harness/triage-security.yaml @@ -4,7 +4,7 @@ # supplies the runner-local pre-script output because Fullsend rejects an # absolute host-file source inherited from a URL-sourced harness. The child # mapping wins for this destination during composition. -base: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/9d6e272a464b63a763f393bfa10412a905ca8f23/harness/triage-security.yaml#sha256=7eba5ddacde66b361cd40b01a0f907c7b7582bfaa3c3e1170a321237ddd570c1 +base: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/59f9ff4b4f49646c64ed3412271ce7c017e781d4/harness/triage-security.yaml#sha256=110fb33d880caf1add20e73c8017451378966eeef52ef34aa988e41c35fc1b02 host_files: - src: ${FULLSEND_RUN_DIR}/pre/triage-security-input.json diff --git a/.fullsend/lock.yaml b/.fullsend/lock.yaml index 1567f70db..9e276e08e 100644 --- a/.fullsend/lock.yaml +++ b/.fullsend/lock.yaml @@ -4,23 +4,23 @@ generated_at: 2026-09-04T13:39:01.038924Z harnesses: triage-security: source: harness/triage-security.yaml - sha256: 3a19b4667401f27d6c6c7ea034234976972050a9ac93cbdfb8df9aca817d4cd2 - resolved_at: 2026-09-22T15:22:29.62869Z + sha256: eb1329bb309c00c339ca34e7da54bafd5faf2e5ef0a3f11bf331faaa8dcd45ca + resolved_at: 2026-09-30T11:35:13.025497Z dependencies: - field: base - url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/9d6e272a464b63a763f393bfa10412a905ca8f23/harness/triage-security.yaml - sha256: 7eba5ddacde66b361cd40b01a0f907c7b7582bfaa3c3e1170a321237ddd570c1 + url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/59f9ff4b4f49646c64ed3412271ce7c017e781d4/harness/triage-security.yaml + sha256: 110fb33d880caf1add20e73c8017451378966eeef52ef34aa988e41c35fc1b02 type: file - fetched_at: 2026-09-22T15:21:56.319373Z + fetched_at: 2026-09-30T11:35:04.92833Z - field: pre_script - url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/9d6e272a464b63a763f393bfa10412a905ca8f23/plugins/sdlc-workflow/scripts/pre-triage-security.sh - sha256: 78d86d8be0087699d78fa54b1b3c1d2e4954179881e264e059b88690f139f619 + url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/59f9ff4b4f49646c64ed3412271ce7c017e781d4/plugins/sdlc-workflow/scripts/pre-triage-security.sh + sha256: fa779388a5bece507d3d670704e7f56c9099e646ecea570b471fdc6c8b9181a6 type: directory files: - path: execute-actions.py sha256: 595220e3cac4426acaecfda17e9c7b73532cd9bf59a453c4093dc8e9a57a0936 - path: execute-triage-security-actions.py - sha256: 95838e07a0ba4960370881a1fe5fcd322d8a2bb3f9b009d6443f6514ef044a24 + sha256: 43263de469c4e997d20c64e89b99e49ec0cb0a386d3af72d42584cbb62bb827a - path: jira-client.py sha256: d2ed3d8188f3f0ceda5f8ed13deadaba19e0f4a3ec9a4041d7f9bef4c101e5e7 - path: post-triage-security.sh @@ -32,7 +32,7 @@ harnesses: - path: pre-verify-pr.sh sha256: 89e37062e78de2f2064863b0395ccc46c89489d1e4ee510b1b20386c20fe30ee - path: pre_triage_security.py - sha256: a4344ed3b4cb178866b43c5d575533b24ec1ff7e3170044f661d26db3a93880f + sha256: 46dbf5fd2061c774774af35ba6da6bd652bba0c9f3144da20573f1ca25aab0c6 - path: pre_verify_pr.py sha256: c2bdade236aa8a2fe374a08a2aab0f78d287125a8ae38b0d3a938b98252fae85 - path: strip_extra_properties.py @@ -40,27 +40,29 @@ harnesses: - path: test_execute_actions.py sha256: 4170eea78768a516097d212a48b4b459ffb47370c0cc224bc157113d581ab0d4 - path: test_execute_triage_security_actions.py - sha256: 7b6159f482e4bef0522d496fe43a49931a1a51a3dd0090d1ca977bb14b6cf6f4 + sha256: eb296eea89b4cbf588b3d0c7a62e520ae6b20fb417fbcada20529d9af876f3f4 - path: test_jira_client.py sha256: 1b9a6cc3aa36942e373df3ed847c550b2e396bc6df6cff5f03361253f7bbc8f1 - path: test_jira_client_cli.py sha256: d36b790c1a310111a0d2f3e81415f9576e80acc5f0bc7d0ff8084ffad001285f - path: test_pre_triage_security.py - sha256: 3f4c483302370c5e8f4e5d318d1283cdd72b7c9408ed6994e2c6cf7750dc4982 + sha256: 31ed6b80c80a934d6f15d9959e1df0d089dea7b8aa6f0ecdf58e36a5e575a860 - path: test_pre_verify_pr.py sha256: df06c53591349693228e51e56f8636a4482bd0b748096671a0198301be1c51bd + - path: test_triage_security_fullsend.py + sha256: 6c5e923ec652d44459b7db12cccb4b72eaea511aacbe6ea04c931a26ed5b1333 - path: validate-output-schema.sh sha256: 56b964145da0b62f438dbc1885780d86e2d589c5340adb93c00e3c8777979cbe - fetched_at: 2026-09-22T15:22:25.050022Z + fetched_at: 2026-09-30T11:35:08.106377Z - field: post_script - url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/9d6e272a464b63a763f393bfa10412a905ca8f23/plugins/sdlc-workflow/scripts/post-triage-security.sh - sha256: 78d86d8be0087699d78fa54b1b3c1d2e4954179881e264e059b88690f139f619 + url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/59f9ff4b4f49646c64ed3412271ce7c017e781d4/plugins/sdlc-workflow/scripts/post-triage-security.sh + sha256: fa779388a5bece507d3d670704e7f56c9099e646ecea570b471fdc6c8b9181a6 type: directory files: - path: execute-actions.py sha256: 595220e3cac4426acaecfda17e9c7b73532cd9bf59a453c4093dc8e9a57a0936 - path: execute-triage-security-actions.py - sha256: 95838e07a0ba4960370881a1fe5fcd322d8a2bb3f9b009d6443f6514ef044a24 + sha256: 43263de469c4e997d20c64e89b99e49ec0cb0a386d3af72d42584cbb62bb827a - path: jira-client.py sha256: d2ed3d8188f3f0ceda5f8ed13deadaba19e0f4a3ec9a4041d7f9bef4c101e5e7 - path: post-triage-security.sh @@ -72,7 +74,7 @@ harnesses: - path: pre-verify-pr.sh sha256: 89e37062e78de2f2064863b0395ccc46c89489d1e4ee510b1b20386c20fe30ee - path: pre_triage_security.py - sha256: a4344ed3b4cb178866b43c5d575533b24ec1ff7e3170044f661d26db3a93880f + sha256: 46dbf5fd2061c774774af35ba6da6bd652bba0c9f3144da20573f1ca25aab0c6 - path: pre_verify_pr.py sha256: c2bdade236aa8a2fe374a08a2aab0f78d287125a8ae38b0d3a938b98252fae85 - path: strip_extra_properties.py @@ -80,27 +82,29 @@ harnesses: - path: test_execute_actions.py sha256: 4170eea78768a516097d212a48b4b459ffb47370c0cc224bc157113d581ab0d4 - path: test_execute_triage_security_actions.py - sha256: 7b6159f482e4bef0522d496fe43a49931a1a51a3dd0090d1ca977bb14b6cf6f4 + sha256: eb296eea89b4cbf588b3d0c7a62e520ae6b20fb417fbcada20529d9af876f3f4 - path: test_jira_client.py sha256: 1b9a6cc3aa36942e373df3ed847c550b2e396bc6df6cff5f03361253f7bbc8f1 - path: test_jira_client_cli.py sha256: d36b790c1a310111a0d2f3e81415f9576e80acc5f0bc7d0ff8084ffad001285f - path: test_pre_triage_security.py - sha256: 3f4c483302370c5e8f4e5d318d1283cdd72b7c9408ed6994e2c6cf7750dc4982 + sha256: 31ed6b80c80a934d6f15d9959e1df0d089dea7b8aa6f0ecdf58e36a5e575a860 - path: test_pre_verify_pr.py sha256: df06c53591349693228e51e56f8636a4482bd0b748096671a0198301be1c51bd + - path: test_triage_security_fullsend.py + sha256: 6c5e923ec652d44459b7db12cccb4b72eaea511aacbe6ea04c931a26ed5b1333 - path: validate-output-schema.sh sha256: 56b964145da0b62f438dbc1885780d86e2d589c5340adb93c00e3c8777979cbe - fetched_at: 2026-09-22T15:22:25.043661Z + fetched_at: 2026-09-30T11:35:08.09954Z - field: validation_loop.script - url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/9d6e272a464b63a763f393bfa10412a905ca8f23/plugins/sdlc-workflow/scripts/validate-output-schema.sh - sha256: 78d86d8be0087699d78fa54b1b3c1d2e4954179881e264e059b88690f139f619 + url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/59f9ff4b4f49646c64ed3412271ce7c017e781d4/plugins/sdlc-workflow/scripts/validate-output-schema.sh + sha256: fa779388a5bece507d3d670704e7f56c9099e646ecea570b471fdc6c8b9181a6 type: directory files: - path: execute-actions.py sha256: 595220e3cac4426acaecfda17e9c7b73532cd9bf59a453c4093dc8e9a57a0936 - path: execute-triage-security-actions.py - sha256: 95838e07a0ba4960370881a1fe5fcd322d8a2bb3f9b009d6443f6514ef044a24 + sha256: 43263de469c4e997d20c64e89b99e49ec0cb0a386d3af72d42584cbb62bb827a - path: jira-client.py sha256: d2ed3d8188f3f0ceda5f8ed13deadaba19e0f4a3ec9a4041d7f9bef4c101e5e7 - path: post-triage-security.sh @@ -112,7 +116,7 @@ harnesses: - path: pre-verify-pr.sh sha256: 89e37062e78de2f2064863b0395ccc46c89489d1e4ee510b1b20386c20fe30ee - path: pre_triage_security.py - sha256: a4344ed3b4cb178866b43c5d575533b24ec1ff7e3170044f661d26db3a93880f + sha256: 46dbf5fd2061c774774af35ba6da6bd652bba0c9f3144da20573f1ca25aab0c6 - path: pre_verify_pr.py sha256: c2bdade236aa8a2fe374a08a2aab0f78d287125a8ae38b0d3a938b98252fae85 - path: strip_extra_properties.py @@ -120,51 +124,53 @@ harnesses: - path: test_execute_actions.py sha256: 4170eea78768a516097d212a48b4b459ffb47370c0cc224bc157113d581ab0d4 - path: test_execute_triage_security_actions.py - sha256: 7b6159f482e4bef0522d496fe43a49931a1a51a3dd0090d1ca977bb14b6cf6f4 + sha256: eb296eea89b4cbf588b3d0c7a62e520ae6b20fb417fbcada20529d9af876f3f4 - path: test_jira_client.py sha256: 1b9a6cc3aa36942e373df3ed847c550b2e396bc6df6cff5f03361253f7bbc8f1 - path: test_jira_client_cli.py sha256: d36b790c1a310111a0d2f3e81415f9576e80acc5f0bc7d0ff8084ffad001285f - path: test_pre_triage_security.py - sha256: 3f4c483302370c5e8f4e5d318d1283cdd72b7c9408ed6994e2c6cf7750dc4982 + sha256: 31ed6b80c80a934d6f15d9959e1df0d089dea7b8aa6f0ecdf58e36a5e575a860 - path: test_pre_verify_pr.py sha256: df06c53591349693228e51e56f8636a4482bd0b748096671a0198301be1c51bd + - path: test_triage_security_fullsend.py + sha256: 6c5e923ec652d44459b7db12cccb4b72eaea511aacbe6ea04c931a26ed5b1333 - path: validate-output-schema.sh sha256: 56b964145da0b62f438dbc1885780d86e2d589c5340adb93c00e3c8777979cbe - fetched_at: 2026-09-22T15:22:25.043661Z + fetched_at: 2026-09-30T11:35:08.09954Z - field: validation_loop.schema - url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/9d6e272a464b63a763f393bfa10412a905ca8f23/plugins/sdlc-workflow/schemas/triage-security-result.schema.json + url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/59f9ff4b4f49646c64ed3412271ce7c017e781d4/plugins/sdlc-workflow/schemas/triage-security-result.schema.json sha256: f1100b5624433fae2163bad82c0ccd641212d3a84e7b0562448919d015b5d1d2 type: resource - fetched_at: 2026-09-22T15:22:25.328859Z + fetched_at: 2026-09-30T11:35:08.380721Z - field: agent - url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/9d6e272a464b63a763f393bfa10412a905ca8f23/plugins/sdlc-workflow/agents/triage-security.md + url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/59f9ff4b4f49646c64ed3412271ce7c017e781d4/plugins/sdlc-workflow/agents/triage-security.md sha256: 3e0680274ff99326fa219b45ccbea6ea1ed1a7eba3f78056acf9e47b29c7c9fd type: resource - fetched_at: 2026-09-22T15:22:25.578402Z + fetched_at: 2026-09-30T11:35:08.639209Z - field: policy - url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/9d6e272a464b63a763f393bfa10412a905ca8f23/plugins/sdlc-workflow/policies/triage-security.yaml - sha256: 725170a4930d9df15e0cd487a9ec373b6287320dd31fa9295597fa77726a9d21 + url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/59f9ff4b4f49646c64ed3412271ce7c017e781d4/plugins/sdlc-workflow/policies/triage-security.yaml + sha256: 312f947a7c0eceab078111406c8288853c760eb0304b080262da322066046b91 type: resource - fetched_at: 2026-09-22T15:22:25.847693Z + fetched_at: 2026-09-30T11:35:08.910263Z - field: host_files[0].src - url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/9d6e272a464b63a763f393bfa10412a905ca8f23/plugins/sdlc-workflow/env/gcp-vertex.env + url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/59f9ff4b4f49646c64ed3412271ce7c017e781d4/plugins/sdlc-workflow/env/gcp-vertex.env sha256: 10b2ba695b1d4e65e0964a233b75d6a06853f1eaefc260c56b9eedd989ae7d41 type: resource - fetched_at: 2026-09-22T15:22:26.108838Z + fetched_at: 2026-09-30T11:35:09.211078Z - field: openshell.profiles[0] - url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/9d6e272a464b63a763f393bfa10412a905ca8f23/plugins/sdlc-workflow/profiles/fullsend-vertex-ai.yaml + url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/59f9ff4b4f49646c64ed3412271ce7c017e781d4/plugins/sdlc-workflow/profiles/fullsend-vertex-ai.yaml sha256: 76535a148387b1281be2bfb23b6724e4133327189b38c8ce1de2c6dddb8d8341 type: resource - fetched_at: 2026-09-22T15:22:26.375931Z + fetched_at: 2026-09-30T11:35:09.473046Z - field: providers[0] - url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/9d6e272a464b63a763f393bfa10412a905ca8f23/plugins/sdlc-workflow/providers/vertex-ai.yaml + url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/59f9ff4b4f49646c64ed3412271ce7c017e781d4/plugins/sdlc-workflow/providers/vertex-ai.yaml sha256: ae5ebe527e5d7b0fa6994346fde3f6ba11b632a3ba78ece96591b5ed85083ec1 type: resource - fetched_at: 2026-09-22T15:22:26.634251Z + fetched_at: 2026-09-30T11:35:09.762266Z - field: plugins[0] - url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/9d6e272a464b63a763f393bfa10412a905ca8f23/plugins/sdlc-workflow/plugin.json - sha256: 9a4abee72870aaadfeae3fc6717c02972e60df0793cfaec16072081e1352b282 + url: https://raw.githubusercontent.com/RHEcosystemAppEng/sdlc-plugins/59f9ff4b4f49646c64ed3412271ce7c017e781d4/plugins/sdlc-workflow/ + sha256: 802a1316374582a6b8ffd6720f30b76c45b78f00f86269aa7758e6f548e0e27c type: directory files: - path: .claude-plugin/plugin.json @@ -178,7 +184,7 @@ harnesses: - path: plugin.json sha256: 727186c0e7e8d0d6b241ff61cb57a979a2d9c7c0c684a4d1c12940534e9f2b18 - path: policies/triage-security.yaml - sha256: 725170a4930d9df15e0cd487a9ec373b6287320dd31fa9295597fa77726a9d21 + sha256: 312f947a7c0eceab078111406c8288853c760eb0304b080262da322066046b91 - path: policies/verify-pr.yaml sha256: 62d1374be253b0b225921bd8e22e679781076ecdb3a9ea22d5e6a4805753c5a7 - path: profiles/fullsend-vertex-ai.yaml @@ -196,7 +202,7 @@ harnesses: - path: scripts/execute-actions.py sha256: 595220e3cac4426acaecfda17e9c7b73532cd9bf59a453c4093dc8e9a57a0936 - path: scripts/execute-triage-security-actions.py - sha256: 95838e07a0ba4960370881a1fe5fcd322d8a2bb3f9b009d6443f6514ef044a24 + sha256: 43263de469c4e997d20c64e89b99e49ec0cb0a386d3af72d42584cbb62bb827a - path: scripts/jira-client.py sha256: d2ed3d8188f3f0ceda5f8ed13deadaba19e0f4a3ec9a4041d7f9bef4c101e5e7 - path: scripts/post-triage-security.sh @@ -208,7 +214,7 @@ harnesses: - path: scripts/pre-verify-pr.sh sha256: 89e37062e78de2f2064863b0395ccc46c89489d1e4ee510b1b20386c20fe30ee - path: scripts/pre_triage_security.py - sha256: a4344ed3b4cb178866b43c5d575533b24ec1ff7e3170044f661d26db3a93880f + sha256: 46dbf5fd2061c774774af35ba6da6bd652bba0c9f3144da20573f1ca25aab0c6 - path: scripts/pre_verify_pr.py sha256: c2bdade236aa8a2fe374a08a2aab0f78d287125a8ae38b0d3a938b98252fae85 - path: scripts/strip_extra_properties.py @@ -216,15 +222,17 @@ harnesses: - path: scripts/test_execute_actions.py sha256: 4170eea78768a516097d212a48b4b459ffb47370c0cc224bc157113d581ab0d4 - path: scripts/test_execute_triage_security_actions.py - sha256: 7b6159f482e4bef0522d496fe43a49931a1a51a3dd0090d1ca977bb14b6cf6f4 + sha256: eb296eea89b4cbf588b3d0c7a62e520ae6b20fb417fbcada20529d9af876f3f4 - path: scripts/test_jira_client.py sha256: 1b9a6cc3aa36942e373df3ed847c550b2e396bc6df6cff5f03361253f7bbc8f1 - path: scripts/test_jira_client_cli.py sha256: d36b790c1a310111a0d2f3e81415f9576e80acc5f0bc7d0ff8084ffad001285f - path: scripts/test_pre_triage_security.py - sha256: 3f4c483302370c5e8f4e5d318d1283cdd72b7c9408ed6994e2c6cf7750dc4982 + sha256: 31ed6b80c80a934d6f15d9959e1df0d089dea7b8aa6f0ecdf58e36a5e575a860 - path: scripts/test_pre_verify_pr.py sha256: df06c53591349693228e51e56f8636a4482bd0b748096671a0198301be1c51bd + - path: scripts/test_triage_security_fullsend.py + sha256: 6c5e923ec652d44459b7db12cccb4b72eaea511aacbe6ea04c931a26ed5b1333 - path: scripts/validate-output-schema.sh sha256: 56b964145da0b62f438dbc1885780d86e2d589c5340adb93c00e3c8777979cbe - path: shared/comment-footnote.md @@ -272,13 +280,13 @@ harnesses: - path: skills/triage-bug/SKILL.md sha256: e3c5f28d1c7bafdcf706d8be89110cef28217ef878a754fb89c571c5731242d4 - path: skills/triage-security/SKILL.md - sha256: 040ba49ffcedb2c0301389ff4ca1572f45c9b9c0d33f7a8f463b0b1ad472d459 + sha256: 23e198c71b8b33af584cfb679d149d416c50f3444b540677d4f0fea8e3cf3102 - path: skills/triage-security/jira-triage-operations.md - sha256: 665aef8f2529ee44be4fdee57783e6d589867f71793e9b7d280ce8f3973a9dcb + sha256: 2421a2e0fb2aa748b5b3b34a523b75f015f6c862fcd82854d1efd3886595aa80 - path: skills/triage-security/remediation-templates.md - sha256: 0b45136eb63e18a0bb81eebcb1dd033a27a69134117949eedf9f8e43d0d76010 + sha256: 05572e97310f23bc9834a4be92fb50af86f2dec16fdb613cb02ca8e936937eb9 - path: skills/triage-security/version-impact-analysis.md - sha256: a18376094360d435e96436c9fd1bd6a04831123d903e44cf6cf57e600285e3c9 + sha256: 79c9bec47f07f76da2479997e0e345f0bc961485a5c4b962563cbbacdc16faa5 - path: skills/verify-pr/SKILL.md sha256: 9fb1e3bbe01d8c57cff6489415b06ecfd14fa63795cabd122580f0bb7408790d - path: skills/verify-pr/correctness.md @@ -293,7 +301,7 @@ harnesses: sha256: 128877cf7e156666dbb403805a0112059cc8cc3255e148c6794da29d48b8f5cf - path: skills/verify-pr/style-conventions.md sha256: 5ab920c596615c0d23354cb0e90fe5ebf5f08635ffa3602e8e2d2abd74028a19 - fetched_at: 2026-09-22T15:22:29.626455Z + fetched_at: 2026-09-30T11:35:13.009869Z verify-pr: source: harness/verify-pr.yaml sha256: cefd31d27a3bb7f61c790725821a808643846afb8bf8f3b1167ea8220a4de884