kova-ghsa-maintainer

What problem does it solve?

It helps maintainers inspect, patch, validate, and publish GitHub Security Advisories (GHSAs) for the Kova repository without violating GHSA workflow constraints or sequencing rules.

Core Features & Use Cases

• Inspect and confirm advisory state: Fetches the current GHSA and checks the latest published npm version to ensure the advisory context matches the package reality.
• Validate private-fork prerequisites: Confirms the advisory private fork has no open PRs before any publish action to avoid HTTP 422 failures.
• Patch advisories safely and correctly: Builds Markdown and JSON payloads safely (including correct PATCH sequencing for required fields) and verifies published state and description formatting.

Use case: You need to update a Kova GHSA description and publish the updated advisory after ensuring the linked private fork is in a publishable state.

Quick Start

Run the Kova skill named kova-ghsa-maintainer to fetch the target GHSA, prepare the corrected Markdown/JSON patch payload, apply the PATCH in the correct sequence, and verify that it is fully published.