Repository navigation
Add /nf-core security summary command - #23
Merged
Merged
Conversation
@core-team can now get an on-demand summary of every currently-open GitHub security advisory across nf-core repos (live data, not the daily digest's cached state), grouped by repo. Posted publicly wherever the command is run (channel or DM), not ephemerally, so the whole team sees the result — mirrors /nf-core proposals review's delivery pattern including the DM fallback when the bot isn't a member of the channel. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
/nf-core security summary, restricted to@core-team, for an on-demand summary of every currently-open GitHub security advisory (triage/draft/published, excludesclosed/withdrawn) across all nf-core repos — grouped by repo, fetched live from GitHub (not the daily digest's cached diff state)./nf-core proposals review's delivery pattern (chat.postMessageto the invoking channel, with a DM fallback if the bot isn't a member there)./nf-core security helpalongside it, following the same router/help pattern ason-call help/github help.list_all_org_advisories()(already used by the daily digest, added in Add daily security advisory digest to Slack #21) and the same mrkdwn-escaping helper, since advisory summaries are attacker-influenced text (anyone can file a "Report a vulnerability" form against any public nf-core repo).docs/commands.md(new "Security Commands" section + permission table),docs/security-advisories.md,README.md— no channel name mentioned anywhere, consistent with Add daily security advisory digest to Slack #21.Test plan
pytest— 573 tests pass, including new coverage intests/test_security_command.py(handler delivery/fallback/permission-gate) andtests/test_security_advisories.py(format_advisories_summary: grouping, state filtering, singular/plural count, mrkdwn escaping)ruff check/ruff format --check— cleanmypy src/— clean/nf-core security summaryin a channel and a DM to confirm both delivery paths🤖 Generated with Claude Code