import-security-issue-from-pr

What problem does it solve?

Convert a public upstream PR that contains a security-relevant fix into a dedicated tracker in the security project, enabling formal CVE allocation and coordinated disclosure workflows.

Core Features & Use Cases

• Detects the PR metadata (title, body, author, state) and derives the applicable scope based on changed files.
• Proposes milestone and constructs a complete tracker payload (title, body, labels, and status) before creation.
• Creates the tracker in the tracker repository, applies labels, assigns a milestone, pins to the Assessed board, and surfaces a status rollup for hand-off to CVE allocation.
• Enforces safety rules for public-PR imports, including reporter credit policy and confidentiality considerations.

Quick Start

Import a public upstream PR (URL or number) to convert it into a security tracker ready for CVE allocation.