Skip to content

Add vulnerability report action#843

Closed
bmendonca3 wants to merge 1 commit into
ossf:mainfrom
bmendonca3:feat-vulnerability-report-action
Closed

Add vulnerability report action#843
bmendonca3 wants to merge 1 commit into
ossf:mainfrom
bmendonca3:feat-vulnerability-report-action

Conversation

@bmendonca3

Copy link
Copy Markdown

Fixes #498.

Summary

  • add a vulnerability_report enforcement action that creates GitHub private vulnerability reports
  • dedupe reports by existing repository advisory summary before creating a new report
  • document the action and self-hosted app permission requirement

Tests

  • GOTOOLCHAIN=local /tmp/allstar-go-toolchain/go/bin/go test ./...

Signed-off-by: bmendonca3 <208517100+bmendonca3@users.noreply.github.com>
@bmendonca3 bmendonca3 requested a review from a team as a code owner May 29, 2026 01:32
@dosubot dosubot Bot added the size:L This PR changes 100-499 lines, ignoring generated files. label May 29, 2026

@justaugustus justaugustus left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See note about AI contributions —> #841 (comment)

@github-actions

github-actions Bot commented Jun 9, 2026

Copy link
Copy Markdown

This pull request has been marked stale because it has been open for 10 days with no activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:L This PR changes 100-499 lines, ignoring generated files. Stale

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

Create GitHub private vulnerability reports as an action

2 participants