Skip to content

Security fix: validate staged public text before public issue creation #626

New issue
New issue
Closed
3 of 3 issues completed
#634
Closed
Security fix: validate staged public text before public issue creation#626
3 of 3 issues completed
#634
Labels
security-fixA fix for a reproduced Security finding

Description

@JacobStephens2
JacobStephens2
opened on Oct 10, 2026

Change the security-fix publishing flow so proposed public issue text is staged and validated before any public issue is created, and the publishing session cannot create public issues on its own.

Private record: https://github.com/JacobStephens2/thirdshift/security/advisories/GHSA-jwc8-2c4w-hvm4

Activity

  1. JacobStephens2
    added
    needs-triageMaintainer needs to evaluate this issue
    on Oct 10, 2026
  2. JacobStephens2
    added sub-issues on Oct 10, 2026
  3. JacobStephens2
    added
    ready-for-agentFully specified, ready for an AFK agent
    security-fixA fix for a reproduced Security finding
    in-progressA Claim: thirdshift has taken this issue
    and removed
    needs-triageMaintainer needs to evaluate this issue
    ready-for-agentFully specified, ready for an AFK agent
    on Oct 10, 2026
  4. JacobStephens2
    added a commit that references this issue on Oct 10, 2026

    Close session-created side-effect issues in the staged publishing path

    53f0007
  5. JacobStephens2
    closed this as completedin #634on Oct 10, 2026
  6. JacobStephens2
    removed
    in-progressA Claim: thirdshift has taken this issue
    on Oct 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    security-fixA fix for a reproduced Security finding

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions