The GitHub Actions job "link-check" on 
airflow-steward.git/feat-rm-handoff-gate-on-review-state has failed.
Run started by GitHub user potiuk (triggered by potiuk).

Head commit for run:
526026a2982fc4ced055e3c6a0665951a0dc9237 / Jarek Potiuk <[email protected]>
feat(security-issue-sync): implement Task 1-4 follow-ups for state-gate

Addresses the four follow-up TODOs called out in #255's PR description:

Task 1 — vulnogram-api-record-fetch CLI
- New file: tools/vulnogram/oauth-api/src/vulnogram_api/record_fetch.py
- Read-only counterpart to vulnogram-api-record-{update,publish}
- Supports --state-only for cheap shell-parsing of CNA_private.state
- Defaults to one-line JSON output on stdout for jq piping
- Wired into pyproject.toml as the `vulnogram-api-record-fetch` script

Task 2 — generator already auto-promotes state on field-readiness
- Discovery: generate-cve-json's compute_cna_private_state already
  emits CNA_private.state = "REVIEW" automatically when all required
  body fields are populated (CVE ID, title, description, affected
  versions, CWE, non-Unknown severity, at least one credit, at least
  one reference). No new --state flag is needed.
- Updated SKILL.md to describe this correctly: sync just pushes the
  generator-emitted JSON; Vulnogram accepts the state field verbatim.

Task 3 — publication-ready comment templates rewritten
- Both manual-paste and oauth-pushed variants now reflect the new
  workflow where sync drives READY → PUBLIC + tracker close.
- Templates are informational only; no RM action required at the
  publication-ready moment. The wrap-up comment (posted post-close)
  is the single RM-action surface for the board archive + milestone
  close.

Task 4 — tools/vulnogram/record.md state-machine update
- State table: DRAFT → REVIEW now set by sync (via generator);
  READY → PUBLIC now sync-driven via vulnogram-api-record-publish.
- Release-manager checklist rewritten: RM-side write count is now
  zero in the common case (sync handles steps 1, 2, 6, 7, 8;
  RM only clicks REVIEW → READY in step 3 + previews + sends in
  steps 4-5).
- Two-record-write-paths section updated to describe the new layered
  state-transition model.

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

Report URL: https://github.com/apache/airflow-steward/actions/runs/26369642631

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to