Skip to content

Document CVE sync lessons: CVE-link selector, push overrides, terminal-only auth - #1558

Merged
potiuk merged 1 commit into
apache:mainfrom
potiuk:agents/docs-cve-sync-lessons
Oct 8, 2026
Merged

potiuk merged 1 commit into
apache:mainfrom
potiuk:agents/docs-cve-sync-lessons

Conversation

@potiuk

@potiuk potiuk commented Oct 8, 2026

Copy link
Copy Markdown
Member

Doc fixes found while syncing a real tracker:

  • bulk-mode.md: the CVE-ID selector matched anywhere in the body (a related CVE could select the wrong issue); it now matches only inside the CVE tool link field.
  • apply-and-push.md: documents --replace-references and --allow-product-change and when each is appropriate.
  • oauth-api README: auth must run in the operator's terminal, never via an agent-driven shared browser.

…l-only auth

- issue-sync bulk mode: match a CVE ID only inside the CVE tool link field.
- issue-sync push: document --replace-references and --allow-product-change.
- oauth-api README: run setup in the operator's terminal, not an agent-driven browser.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@github-actions github-actions Bot added family:security security-* skills family:tools tools/* family:docs Docs, MISSION.md, READMEs capability:intake Import external signal + sync tracker state contract:cve-authority Tool capability: CVE allocation / record management / publication labels Oct 8, 2026
@potiuk
potiuk merged commit 6fa1049 into apache:main Oct 8, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

capability:intake Import external signal + sync tracker state contract:cve-authority Tool capability: CVE allocation / record management / publication family:docs Docs, MISSION.md, READMEs family:security security-* skills family:tools tools/*

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant