The GitHub Actions job "GitHub Actions Security Analysis" on 
airflow-steward.git/main has failed.
Run started by GitHub user potiuk (triggered by potiuk).

Head commit for run:
7b53f74fca2dbe43118201b93f288d94bb66b4cf / Jarek Potiuk <[email protected]>
feat(security-issue-sync): wrap-up comment template for post-close RM hand-off 
(#224)

Add `tools/vulnogram/release-manager-wrap-up-comment.md` — the
template `security-issue-sync` posts AFTER the tracker has been
auto-closed at the end of the post-advisory lifecycle close-out
(the combined apply on the `Advisory archived on <users-list>`
row of Step 2b).

By the time this comment posts, sync has already done all of:
captured the archive URL, extracted the public short summary into
the body, flipped labels (`fix released → announced - emails sent`
+ `announced`), regenerated and re-pushed the JSON, moved the
Vulnogram record `REVIEW → PUBLIC` via the new
`vulnogram-api-record-publish` CLI (#223), moved the board to the
`Announced` column, and closed the tracker. The wrap-up comment is
informational + a tiny ping to the RM with two residual manual
steps:

  1. Archive the closed tracker from the `Announced` column.
  2. (Conditional, last-sibling case only) Close the milestone via
     the clickable URL the skill substitutes into MILESTONE_BULLET.
     In the more common "other siblings still open" case the bullet
     resolves to an empty string and the milestone close happens
     when the *last* sibling tracker reaches the same step.

Marker: `<!-- apache-steward: release-manager-wrap-up v1 -->` —
sync uses this for idempotency (the tracker is closed by the time
this comment posts; re-posting on a re-sync would just be noise).

Companion to #222 (convention update — describes when this comment
fires) and #223 (`vulnogram-api-record-publish` — the tool that
flips REVIEW → PUBLIC, referenced from the template). The
SKILL.md Step 4 hookup (the apply-side code that actually composes
the placeholders and posts the comment) lands in a follow-up PR
once the agent-procedure for the combined apply is wired through.

Report URL: https://github.com/apache/airflow-steward/actions/runs/26065442056

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to