Skip to content

Commit 70c3952

Browse files
chore(ci): remove LLM summary generation from vulnerability triage
Replace the Claude analysis step in the vulnerability-triage workflow with deterministic jq/curl scripting. Findings are now built directly from the normalized Trivy, Dependabot, and CodeQL scan files (dedup by pre-computed id, CodeQL grouped by rule, templated titles/descriptions), and existing Linear issues are matched via GraphQL. No LLM is used anywhere. Drops the ANTHROPIC_API_KEY secret from the reusable workflow (no callers pass it). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
1 parent ed74594 commit 70c3952

1 file changed

Lines changed: 176 additions & 110 deletions

File tree

0 commit comments

Comments
 (0)