Vuln Tracker

Daily vulnerability tracking works by loading vuln-scanner scans from memory and reconciling them with live GitHub PR states and security advisories. It categorizes entries by status to surface maintainer responses needing replies, preventing disclosure drift through a living dashboard.

Automate daily security PR audits by running the tracker against memory/vuln-scanned.json to merge scanner outputs with GitHub PRs. It categorizes items by status—merged, open-clean, needs-answer, stale-no-review, aging-engaged—and updates a living dashboard in memory/vuln-followup.md to notify operators of actionable items.

Generate a daily operator dashboard by applying the tracker across memory history, GitHub PR state, and security advisories. It categorizes vuln-scanner outputs into actionable statuses and writes the results to memory/vuln-followup.md, ensuring operators are notified of items requiring immediate replies or review.

Categorize stale security PRs and missing memory entries using safe defaults built into the tracker. It robustly handles missing memory, skipped items, pre-history PRs, and archive states, sorting them into categories like stale-no-review, lost-draft, and pre-history to ensure no vulnerability disclosure is overlooked.

Vuln tracking handles pre-history PRs and archive states safely by applying safe defaults during the reconciliation process. It ensures robust handling of missing memory and skipped items, categorizing them appropriately as pre-history or archived so that historical vulnerability disclosures remain tracked without breaking the daily dashboard generation.