Skip to content

Add vulnerability report action#843

Open
bmendonca3 wants to merge 1 commit into
ossf:mainfrom
bmendonca3:feat-vulnerability-report-action
Open

Add vulnerability report action#843
bmendonca3 wants to merge 1 commit into
ossf:mainfrom
bmendonca3:feat-vulnerability-report-action

Conversation

@bmendonca3

Copy link
Copy Markdown

Fixes #498.

Summary

  • add a vulnerability_report enforcement action that creates GitHub private vulnerability reports
  • dedupe reports by existing repository advisory summary before creating a new report
  • document the action and self-hosted app permission requirement

Tests

  • GOTOOLCHAIN=local /tmp/allstar-go-toolchain/go/bin/go test ./...

Signed-off-by: bmendonca3 <208517100+bmendonca3@users.noreply.github.com>
@bmendonca3 bmendonca3 requested a review from a team as a code owner May 29, 2026 01:32
@dosubot dosubot Bot added the size:L This PR changes 100-499 lines, ignoring generated files. label May 29, 2026

@justaugustus justaugustus left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See note about AI contributions —> #841 (comment)

@github-actions

github-actions Bot commented Jun 9, 2026

Copy link
Copy Markdown

This pull request has been marked stale because it has been open for 10 days with no activity

@github-actions github-actions Bot added the Stale label Jun 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:L This PR changes 100-499 lines, ignoring generated files. Stale

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

Create GitHub private vulnerability reports as an action

2 participants