openclaw-ghsa-maintainer

Automate GHSA advisory management by using workflows that inspect advisory state, verify private fork status, and apply patch payloads. Guardrails enforce sequencing and validate state transitions from draft to published using Markdown and JSON payloads.

Transitioning an advisory from draft to published involves building and applying patch payloads safely. The workflow enforces sequencing rules and validates state transitions using explicit data handling steps with Markdown and JSON payloads.

Publishing a GHSA security advisory requires no open PRs in the private fork. The workflow enforces guardrails to ensure adherence to advisory publishing rules and prevent errors during patch sequencing.

Verify the private fork status by inspecting the advisory state and fetching the latest advisory data. The workflow checks fork readiness before building and applying patch payloads to ensure correct state transitions.

Automated security advisory workflows require strict adherence to publishing rules and no open PRs in the private fork. Limitations include dependency on manual validation of state transitions and ensuring correct patch payload sequencing.