Add CVE triage and remediation skills - #756

Open

sbouchet wants to merge 32 commits into

che-incubator:mainfrom

sbouchet:CRW-11356

Commits on Sep 11, 2026

chore: Update CVE remediation skill with version map and full package

sbouchet
and
claude
committed
6a58967
chore: update CVE skill to prefer parent-scoped overrides and propose rebase rules

sbouchet
and
claude
committed
52cf7f9
fix: always prefer parent-scoped overrides in CVE skill

sbouchet
and
claude
committed
d255e8a
fix: use npm run prepare to regenerate lock files in CVE skill

sbouchet
and
claude
committed
8a49fe2
fix: add lock file verification step to CVE skill

sbouchet
and
claude
committed
5767768
fix: warn user about stale lock files before regenerating

sbouchet
and
claude
committed
54f0cff
fix: try bumping parent packages before adding overrides in CVE skill

sbouchet
and
claude
committed
379b7ef
add a step to move the jira ticket to in progress
sbouchet
committed
b173bff
add a dependabot CVE triage skill
sbouchet
committed
e915c2e
update after form-data cve fix
sbouchet
committed
894c470
update after adding jetbrains-ide cve skill
sbouchet
committed
cbdedc7
update dependabot triage: use scope instead of relationship, keep transitive deps

sbouchet
and
claude
committed
e05d365
fix: address PR review feedback on CVE skills

sbouchet
and
claude
committed
82b11a3
improve container/RPM CVE analysis in remediation skill

sbouchet
and
claude
committed
cbe1a83
fix: improve CVE remediation skill with lessons from js-yaml fix

sbouchet
and
claude
committed
8ae5938
chore: clarify no-duplicate override rule in CVE remediation skill

sbouchet
and
claude
committed
adfe426
chore: condense CVE remediation skill (417 → 163 lines)

sbouchet
and
claude
committed
c943625
chore: condense CVE remediation skill (417 → 163 lines)

sbouchet
and
claude
committed
8a6d2a7
chore: address CodeRabbit review feedback on CVE skills

sbouchet
and
claude
committed
4bd0ac4
chore: address CodeRabbit review feedback on CVE skills

sbouchet
and
claude
committed
15bda6a
chore: address CodeRabbit review feedback on CVE remediation skill

sbouchet
and
claude
committed
f6b314b
chore: paginate Dependabot cross-check in CVE remediation skill

sbouchet
and
claude
committed
e15b33d
chore: address CodeRabbit review feedback on CVE remediation skill

sbouchet
and
claude
committed
941576a
chore: address CodeRabbit review feedback on CVE skills

sbouchet
and
claude
committed
cb9f313
chore: fix dedup and transitive filtering in dependabot-cve-triage skill

sbouchet
and
claude
committed
9c736dc
chore: unify CVE remediation to process both ProdSec and Dependabot tickets

sbouchet
and
claude
committed
2bec534
added intro
sbouchet
committed
28d1073
chore: address CodeRabbit review feedback on CVE skills

sbouchet
and
claude
committed
bfd5787
chore: require exact package-name matching in CVE remediation skill

sbouchet
and
claude
committed
61abf57

Commits on Sep 15, 2026

chore: add obsolete override cleanup step to CVE remediation skill

sbouchet
and
claude
committed
494dddb

Commits on Sep 16, 2026

Merge branch 'main' into CRW-11356
sbouchet
authored
29435e3
added a step to enforce same version against package and lock file.
sbouchet
committed
92e6152