fix: address gemini-code-assist review on PR #1

- collect_github._get now guards with isinstance(res, list) so an
  unexpected dict response (rate-limit envelope, 404, etc.) does not
  poison downstream iteration with AttributeError. [HIGH]
- report._parse_iso and score._parse_iso drop the manual `.replace
  ("Z", "+00:00")`; datetime.fromisoformat handles the Z suffix
  natively from Python 3.11 onward. Also narrow the bare `except` to
  (ValueError, TypeError). [MEDIUM]
- report.render writes links as `[title](<url>)` so AWS URLs that
  contain parentheses (common in whats-new and release-notes paths)
  do not break vanilla Markdown link parsing. [MEDIUM]
- new-deep-dive.sh and new-track.sh switch sed delimiter from `/` to
  `|` so a track / topic that contains a slash does not abort sed.
  [MEDIUM]
- Regenerate today's seed reports with the new angle-bracket link
  format so the committed sample matches the live formatter.

Author: kanywst

scripts/awsdd/collect_github.py

@@ -31,7 +31,10 @@ def _get(path: str) -> list[dict]:
     req = Request(f"{API}{path}", headers=headers)
     try:
         with urlopen(req, timeout=30) as r:
-            return json.loads(r.read().decode("utf-8"))
+            res = json.loads(r.read().decode("utf-8"))
+        # GitHub returns a JSON object (not a list) on error envelopes
+        # (rate-limit, 404, etc.); guard so callers can iterate safely.
+        return res if isinstance(res, list) else []
     except HTTPError as e:
         print(f"[collect_github] {path}: HTTP {e.code}")
         return []

scripts/awsdd/report.py

@@ -11,9 +11,10 @@
 
 
 def _parse_iso(s: str) -> datetime:
+    # Python 3.11+ accepts the "Z" suffix natively.
     try:
-        return datetime.fromisoformat((s or "").replace("Z", "+00:00"))
-    except Exception:
+        return datetime.fromisoformat(s or "")
+    except (ValueError, TypeError):
         return datetime.now(UTC)
 
 
@@ -74,7 +75,9 @@ def render(track: str, mode: str) -> None:
                 src = it.get("source", "")
                 pub = (it.get("published_at") or "")[:10]
                 score = float(it.get("score", 0.0))
-                lines.append(f"- [{title}]({url}) — `{src}` · {pub} · **score {score:.2f}**")
+                # angle-bracket the URL: AWS links sometimes contain `(` / `)`,
+                # which break vanilla Markdown link parsing.
+                lines.append(f"- [{title}](<{url}>) — `{src}` · {pub} · **score {score:.2f}**")
             lines.append("")
 
     out = track_dir(track) / "reports" / mode / _filename(mode, now)

scripts/awsdd/score.py

@@ -11,9 +11,10 @@
 
 
 def _parse_iso(s: str) -> datetime:
+    # Python 3.11+ accepts the "Z" suffix natively.
     try:
-        return datetime.fromisoformat((s or "").replace("Z", "+00:00"))
-    except Exception:
+        return datetime.fromisoformat(s or "")
+    except (ValueError, TypeError):
         return datetime.now(UTC)
 
 

scripts/new-deep-dive.sh

@@ -18,5 +18,5 @@ if [ -e "$dst" ]; then
 fi
 
 mkdir -p "$dst_dir"
-sed -e "s/{{TRACK}}/$track/g" -e "s/{{TOPIC}}/$topic/g" -e "s/{{DATE}}/$(date -u +%Y-%m-%d)/g" "$src" > "$dst"
+sed -e "s|{{TRACK}}|$track|g" -e "s|{{TOPIC}}|$topic|g" -e "s|{{DATE}}|$(date -u +%Y-%m-%d)|g" "$src" > "$dst"
 echo "Created $dst"

scripts/new-track.sh

@@ -15,7 +15,7 @@ mkdir -p "$dst"
 cp -R "$src/." "$dst/"
 # substitute placeholder in README
 if [ -f "$dst/README.md" ]; then
-  sed "s/{{TRACK}}/$name/g" "$dst/README.md" > "$dst/README.md.tmp"
+  sed "s|{{TRACK}}|$name|g" "$dst/README.md" > "$dst/README.md.tmp"
   mv "$dst/README.md.tmp" "$dst/README.md"
 fi
 

tracks/iam/reports/daily/2026-05-17.md

@@ -4,13 +4,13 @@ Window: last 2 day(s) · items in window: **11** · top shown: **10**
 
 ## RSS
 
-- [AWS Organizations now supports higher quotas for service control policies (SCPs)](https://aws.amazon.com/about-aws/whats-new/2026/05/aws-organizations-increased-scp-quotas/) — `rss:aws-whats-new` · 2026-05-15 · **score 4.50**
-- [Amazon EMR Serverless is now available in additional AWS Regions](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-emr-serverless-aws-regions/) — `rss:aws-whats-new` · 2026-05-15 · **score 2.52**
-- [Amazon CloudWatch Logs announces increased query result limits](https://aws.amazon.com/about-aws/whats-new/2026/05/cloudwatch-logs-query-results/) — `rss:aws-whats-new` · 2026-05-15 · **score 1.78**
-- [CVE-2026-8686 - Heap out-of-bounds read in coreMQTT MQTT5 property parsing](https://aws.amazon.com/security/security-bulletins/rss/2026-032-aws/) — `rss:aws-security-bulletins` · 2026-05-15 · **score 1.77**
-- [Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 & CVE-2026-8597)](https://aws.amazon.com/security/security-bulletins/rss/2026-031-aws/) — `rss:aws-security-bulletins` · 2026-05-15 · **score 1.77**
-- [AWS Partner Central agents now accelerates opportunity creation](https://aws.amazon.com/about-aws/whats-new/2026/05/aws-partner-central-agents-oppo) — `rss:aws-whats-new` · 2026-05-15 · **score 1.77**
-- [The AWS AI Security Framework: Securing AI with the right controls, at the right layers, at the right phases](https://aws.amazon.com/blogs/security/the-aws-ai-security-framework-securing-ai-with-the-right-controls-at-the-right-layers-at-the-right-phases/) — `rss:aws-security-blog` · 2026-05-15 · **score 1.76**
-- [Amazon Connect Cases now lets you edit related items and delete cases from the agent workspace](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-connect-cases-related-item/) — `rss:aws-whats-new` · 2026-05-15 · **score 1.76**
-- [Amazon RDS for PostgreSQL announces Extended Support minor versions 11.22-rds.20260224, 12.22-rds.20260224, and 13.23-rds.20260224](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-rds-postgresql-extended-support/) — `rss:aws-whats-new` · 2026-05-15 · **score 1.76**
-- [Amazon Managed Grafana now supports in-place upgrade to Grafana version 12.4](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-managed-grafana-v12-update/) — `rss:aws-whats-new` · 2026-05-15 · **score 1.76**
+- [AWS Organizations now supports higher quotas for service control policies (SCPs)](<https://aws.amazon.com/about-aws/whats-new/2026/05/aws-organizations-increased-scp-quotas/>) — `rss:aws-whats-new` · 2026-05-15 · **score 4.50**
+- [Amazon EMR Serverless is now available in additional AWS Regions](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-emr-serverless-aws-regions/>) — `rss:aws-whats-new` · 2026-05-15 · **score 2.52**
+- [Amazon CloudWatch Logs announces increased query result limits](<https://aws.amazon.com/about-aws/whats-new/2026/05/cloudwatch-logs-query-results/>) — `rss:aws-whats-new` · 2026-05-15 · **score 1.78**
+- [CVE-2026-8686 - Heap out-of-bounds read in coreMQTT MQTT5 property parsing](<https://aws.amazon.com/security/security-bulletins/rss/2026-032-aws/>) — `rss:aws-security-bulletins` · 2026-05-15 · **score 1.77**
+- [Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 & CVE-2026-8597)](<https://aws.amazon.com/security/security-bulletins/rss/2026-031-aws/>) — `rss:aws-security-bulletins` · 2026-05-15 · **score 1.77**
+- [AWS Partner Central agents now accelerates opportunity creation](<https://aws.amazon.com/about-aws/whats-new/2026/05/aws-partner-central-agents-oppo>) — `rss:aws-whats-new` · 2026-05-15 · **score 1.77**
+- [The AWS AI Security Framework: Securing AI with the right controls, at the right layers, at the right phases](<https://aws.amazon.com/blogs/security/the-aws-ai-security-framework-securing-ai-with-the-right-controls-at-the-right-layers-at-the-right-phases/>) — `rss:aws-security-blog` · 2026-05-15 · **score 1.76**
+- [Amazon Connect Cases now lets you edit related items and delete cases from the agent workspace](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-connect-cases-related-item/>) — `rss:aws-whats-new` · 2026-05-15 · **score 1.76**
+- [Amazon RDS for PostgreSQL announces Extended Support minor versions 11.22-rds.20260224, 12.22-rds.20260224, and 13.23-rds.20260224](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-rds-postgresql-extended-support/>) — `rss:aws-whats-new` · 2026-05-15 · **score 1.76**
+- [Amazon Managed Grafana now supports in-place upgrade to Grafana version 12.4](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-managed-grafana-v12-update/>) — `rss:aws-whats-new` · 2026-05-15 · **score 1.75**

tracks/iam/reports/weekly/2026-W20.md

@@ -4,31 +4,31 @@ Window: last 7 day(s) · items in window: **69** · top shown: **25**
 
 ## RSS
 
-- [AWS Organizations now supports higher quotas for service control policies (SCPs)](https://aws.amazon.com/about-aws/whats-new/2026/05/aws-organizations-increased-scp-quotas/) — `rss:aws-whats-new` · 2026-05-15 · **score 4.50**
-- [Amazon EC2 High Memory U7i instances now available in AWS Europe (Paris) region](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-ec2-u7i-aws-europe-paris/) — `rss:aws-whats-new` · 2026-05-14 · **score 3.65**
-- [Amazon SageMaker Data Agent now available for IAM Identity Center domains](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-sagemaker-data-agent-idc/) — `rss:aws-whats-new` · 2026-05-13 · **score 3.05**
-- [Amazon CloudFront Premium flat-rate plan now supports configurable usage allowances](https://aws.amazon.com/about-aws/whats-new/2026/05/cloudfront-configurable-premium-flat-rate-plans/) — `rss:aws-whats-new` · 2026-05-12 · **score 2.67**
-- [Regional routing for AWS access portals: Implementing custom vanity domains for IAM Identity Center](https://aws.amazon.com/blogs/security/regional-routing-for-aws-access-portals-implementing-custom-vanity-domains-for-iam-identity-center/) — `rss:aws-security-blog` · 2026-05-14 · **score 2.66**
-- [Detecting and preventing crypto mining in your AWS environment](https://aws.amazon.com/blogs/security/detecting-and-preventing-crypto-mining-in-your-aws-environment/) — `rss:aws-security-blog` · 2026-05-13 · **score 2.55**
-- [Amazon EMR Serverless is now available in additional AWS Regions](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-emr-serverless-aws-regions/) — `rss:aws-whats-new` · 2026-05-15 · **score 2.52**
-- [Complimentary virtual training: Get hands-on with AWS Security Services](https://aws.amazon.com/blogs/security/complimentary-virtual-training-get-hands-on-with-aws-security-services/) — `rss:aws-security-blog` · 2026-05-11 · **score 2.33**
-- [AWS Lambda supports scheduled scaling for functions on Lambda Managed Instances](https://aws.amazon.com/about-aws/whats-new/2026/05/aws-lambda-managed-instances/) — `rss:aws-whats-new` · 2026-05-12 · **score 2.18**
-- [Amazon SageMaker Feature Store now supports SageMaker Python SDK V3](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-sagemaker-feature-store-pyv3/) — `rss:aws-whats-new` · 2026-05-12 · **score 2.17**
-- [AWS HealthOmics now supports caching of cancelled workflow runs](https://aws.amazon.com/about-aws/whats-new/2026/05/aws-healthomics-caching-cancelled-runs/) — `rss:aws-whats-new` · 2026-05-11 · **score 1.83**
-- [Amazon CloudWatch Logs announces increased query result limits](https://aws.amazon.com/about-aws/whats-new/2026/05/cloudwatch-logs-query-results/) — `rss:aws-whats-new` · 2026-05-15 · **score 1.78**
-- [CVE-2026-8686 - Heap out-of-bounds read in coreMQTT MQTT5 property parsing](https://aws.amazon.com/security/security-bulletins/rss/2026-032-aws/) — `rss:aws-security-bulletins` · 2026-05-15 · **score 1.77**
-- [Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 & CVE-2026-8597)](https://aws.amazon.com/security/security-bulletins/rss/2026-031-aws/) — `rss:aws-security-bulletins` · 2026-05-15 · **score 1.77**
-- [AWS Partner Central agents now accelerates opportunity creation](https://aws.amazon.com/about-aws/whats-new/2026/05/aws-partner-central-agents-oppo) — `rss:aws-whats-new` · 2026-05-15 · **score 1.77**
-- [The AWS AI Security Framework: Securing AI with the right controls, at the right layers, at the right phases](https://aws.amazon.com/blogs/security/the-aws-ai-security-framework-securing-ai-with-the-right-controls-at-the-right-layers-at-the-right-phases/) — `rss:aws-security-blog` · 2026-05-15 · **score 1.76**
-- [Amazon Connect Cases now lets you edit related items and delete cases from the agent workspace](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-connect-cases-related-item/) — `rss:aws-whats-new` · 2026-05-15 · **score 1.76**
-- [Amazon RDS for PostgreSQL announces Extended Support minor versions 11.22-rds.20260224, 12.22-rds.20260224, and 13.23-rds.20260224](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-rds-postgresql-extended-support/) — `rss:aws-whats-new` · 2026-05-15 · **score 1.76**
-- [Amazon Managed Grafana now supports in-place upgrade to Grafana version 12.4](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-managed-grafana-v12-update/) — `rss:aws-whats-new` · 2026-05-15 · **score 1.75**
-- [AWS announces AWS Interconnect - multicloud connectivity with Oracle Cloud Infrastructure in preview](https://aws.amazon.com/about-aws/whats-new/2026/05/aws-announces-AWS-interconnect-multicloud-oci-preview/) — `rss:aws-whats-new` · 2026-05-15 · **score 1.75**
-- [Amazon CloudFront announces support for OCSP Revocation for Mutual TLS (Viewer)](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-cloudfront-mtls-ocsp/) — `rss:aws-whats-new` · 2026-05-14 · **score 1.67**
-- [Amazon CloudFront announces Passthrough Mode for mutual TLS (Viewer)](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-cloudfront-mtls-passthrough/) — `rss:aws-whats-new` · 2026-05-14 · **score 1.67**
-- [Amazon Bedrock Introduces Advanced Prompt Optimization and Migration Tool](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-bedrock-advanced-prompt-optimization-migration-tool/) — `rss:aws-whats-new` · 2026-05-14 · **score 1.66**
-- [Announcing general availability of Amazon EC2 M3 Ultra Mac instances](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-ec2-m3-ultra-mac-instances-generally-available/) — `rss:aws-whats-new` · 2026-05-14 · **score 1.66**
+- [AWS Organizations now supports higher quotas for service control policies (SCPs)](<https://aws.amazon.com/about-aws/whats-new/2026/05/aws-organizations-increased-scp-quotas/>) — `rss:aws-whats-new` · 2026-05-15 · **score 4.50**
+- [Amazon EC2 High Memory U7i instances now available in AWS Europe (Paris) region](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-ec2-u7i-aws-europe-paris/>) — `rss:aws-whats-new` · 2026-05-14 · **score 3.65**
+- [Amazon SageMaker Data Agent now available for IAM Identity Center domains](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-sagemaker-data-agent-idc/>) — `rss:aws-whats-new` · 2026-05-13 · **score 3.05**
+- [Amazon CloudFront Premium flat-rate plan now supports configurable usage allowances](<https://aws.amazon.com/about-aws/whats-new/2026/05/cloudfront-configurable-premium-flat-rate-plans/>) — `rss:aws-whats-new` · 2026-05-12 · **score 2.67**
+- [Regional routing for AWS access portals: Implementing custom vanity domains for IAM Identity Center](<https://aws.amazon.com/blogs/security/regional-routing-for-aws-access-portals-implementing-custom-vanity-domains-for-iam-identity-center/>) — `rss:aws-security-blog` · 2026-05-14 · **score 2.66**
+- [Detecting and preventing crypto mining in your AWS environment](<https://aws.amazon.com/blogs/security/detecting-and-preventing-crypto-mining-in-your-aws-environment/>) — `rss:aws-security-blog` · 2026-05-13 · **score 2.55**
+- [Amazon EMR Serverless is now available in additional AWS Regions](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-emr-serverless-aws-regions/>) — `rss:aws-whats-new` · 2026-05-15 · **score 2.52**
+- [Complimentary virtual training: Get hands-on with AWS Security Services](<https://aws.amazon.com/blogs/security/complimentary-virtual-training-get-hands-on-with-aws-security-services/>) — `rss:aws-security-blog` · 2026-05-11 · **score 2.33**
+- [AWS Lambda supports scheduled scaling for functions on Lambda Managed Instances](<https://aws.amazon.com/about-aws/whats-new/2026/05/aws-lambda-managed-instances/>) — `rss:aws-whats-new` · 2026-05-12 · **score 2.18**
+- [Amazon SageMaker Feature Store now supports SageMaker Python SDK V3](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-sagemaker-feature-store-pyv3/>) — `rss:aws-whats-new` · 2026-05-12 · **score 2.17**
+- [AWS HealthOmics now supports caching of cancelled workflow runs](<https://aws.amazon.com/about-aws/whats-new/2026/05/aws-healthomics-caching-cancelled-runs/>) — `rss:aws-whats-new` · 2026-05-11 · **score 1.83**
+- [Amazon CloudWatch Logs announces increased query result limits](<https://aws.amazon.com/about-aws/whats-new/2026/05/cloudwatch-logs-query-results/>) — `rss:aws-whats-new` · 2026-05-15 · **score 1.78**
+- [CVE-2026-8686 - Heap out-of-bounds read in coreMQTT MQTT5 property parsing](<https://aws.amazon.com/security/security-bulletins/rss/2026-032-aws/>) — `rss:aws-security-bulletins` · 2026-05-15 · **score 1.77**
+- [Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 & CVE-2026-8597)](<https://aws.amazon.com/security/security-bulletins/rss/2026-031-aws/>) — `rss:aws-security-bulletins` · 2026-05-15 · **score 1.77**
+- [AWS Partner Central agents now accelerates opportunity creation](<https://aws.amazon.com/about-aws/whats-new/2026/05/aws-partner-central-agents-oppo>) — `rss:aws-whats-new` · 2026-05-15 · **score 1.77**
+- [The AWS AI Security Framework: Securing AI with the right controls, at the right layers, at the right phases](<https://aws.amazon.com/blogs/security/the-aws-ai-security-framework-securing-ai-with-the-right-controls-at-the-right-layers-at-the-right-phases/>) — `rss:aws-security-blog` · 2026-05-15 · **score 1.76**
+- [Amazon Connect Cases now lets you edit related items and delete cases from the agent workspace](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-connect-cases-related-item/>) — `rss:aws-whats-new` · 2026-05-15 · **score 1.76**
+- [Amazon RDS for PostgreSQL announces Extended Support minor versions 11.22-rds.20260224, 12.22-rds.20260224, and 13.23-rds.20260224](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-rds-postgresql-extended-support/>) — `rss:aws-whats-new` · 2026-05-15 · **score 1.76**
+- [Amazon Managed Grafana now supports in-place upgrade to Grafana version 12.4](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-managed-grafana-v12-update/>) — `rss:aws-whats-new` · 2026-05-15 · **score 1.75**
+- [AWS announces AWS Interconnect - multicloud connectivity with Oracle Cloud Infrastructure in preview](<https://aws.amazon.com/about-aws/whats-new/2026/05/aws-announces-AWS-interconnect-multicloud-oci-preview/>) — `rss:aws-whats-new` · 2026-05-15 · **score 1.75**
+- [Amazon CloudFront announces support for OCSP Revocation for Mutual TLS (Viewer)](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-cloudfront-mtls-ocsp/>) — `rss:aws-whats-new` · 2026-05-14 · **score 1.67**
+- [Amazon CloudFront announces Passthrough Mode for mutual TLS (Viewer)](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-cloudfront-mtls-passthrough/>) — `rss:aws-whats-new` · 2026-05-14 · **score 1.67**
+- [Amazon Bedrock Introduces Advanced Prompt Optimization and Migration Tool](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-bedrock-advanced-prompt-optimization-migration-tool/>) — `rss:aws-whats-new` · 2026-05-14 · **score 1.66**
+- [Announcing general availability of Amazon EC2 M3 Ultra Mac instances](<https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-ec2-m3-ultra-mac-instances-generally-available/>) — `rss:aws-whats-new` · 2026-05-14 · **score 1.66**
 
 ## GITHUB
 
-- [v1.8.3](https://github.com/aws/rolesanywhere-credential-helper/releases/tag/v1.8.3) — `github:aws/rolesanywhere-credential-helper` · 2026-05-13 · **score 2.04**
+- [v1.8.3](<https://github.com/aws/rolesanywhere-credential-helper/releases/tag/v1.8.3>) — `github:aws/rolesanywhere-credential-helper` · 2026-05-13 · **score 2.04**