Skip to content

Add cookie label to create-issue safe outputs in security/static-analysis workflows - #48597

Merged
pelikhan merged 1 commit into
mainfrom
copilot/review-agentic-workflows-create-issue
Jul 28, 2026
Merged

Add cookie label to create-issue safe outputs in security/static-analysis workflows#48597
pelikhan merged 1 commit into
mainfrom
copilot/review-agentic-workflows-create-issue

Conversation

Copilot AI commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

Several high-value security and static-analysis workflows were missing the cookie label on their create-issue safe outputs, while equivalent workflows (lint-monster, eslint-monster, go-pattern-detector, etc.) already had it.

Workflows updated

Workflow Purpose
static-analysis-report zizmor, poutine, actionlint, grype, yamllint daily scan
daily-vulnhunter-scan Capital One VulnHunter vulnerability scan
deepsec-security-scan DeepSec agentic vulnerability review
sighthound-security-scan Sighthound security scan
daily-security-red-team Backdoor / secret-leak red-team scan
uk-ai-operational-resilience UK AI open-code vulnerability-risk governance

Each change is a single-line labels addition:

# before
labels: [security, vulnhunter]
# after
labels: [security, vulnhunter, cookie]

All six .lock.yml files recompiled clean.

…nalysis workflows

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot AI changed the title Add cookie label to high-value security/static-analysis workflows Add cookie label to create-issue safe outputs in security/static-analysis workflows Jul 28, 2026
Copilot AI requested a review from pelikhan July 28, 2026 11:53
@pelikhan
pelikhan marked this pull request as ready for review July 28, 2026 11:54
Copilot AI review requested due to automatic review settings July 28, 2026 11:54
@pelikhan
pelikhan merged commit 3e487cf into main Jul 28, 2026
@pelikhan
pelikhan deleted the copilot/review-agentic-workflows-create-issue branch July 28, 2026 11:55

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds the cookie label to issue-creation outputs across six security workflows and synchronizes their compiled workflows.

Changes:

  • Added cookie to each create-issue label list.
  • Updated generated safe-output configurations and metadata hashes.
Show a summary per file
File Description
.github/workflows/uk-ai-operational-resilience.md Adds the label.
.github/workflows/uk-ai-operational-resilience.lock.yml Updates compiled output.
.github/workflows/static-analysis-report.md Adds the label.
.github/workflows/static-analysis-report.lock.yml Updates compiled output.
.github/workflows/sighthound-security-scan.md Adds the label.
.github/workflows/sighthound-security-scan.lock.yml Updates compiled output.
.github/workflows/deepsec-security-scan.md Adds the label.
.github/workflows/deepsec-security-scan.lock.yml Updates compiled output.
.github/workflows/daily-vulnhunter-scan.md Adds the label.
.github/workflows/daily-vulnhunter-scan.lock.yml Updates compiled output.
.github/workflows/daily-security-red-team.md Adds the label.
.github/workflows/daily-security-red-team.lock.yml Updates compiled output.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 12/12 changed files
  • Comments generated: 0
  • Review effort level: Medium

@github-actions

Copy link
Copy Markdown
Contributor

🎉 This pull request is included in a new release.

Release: v0.83.5

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants