track-findings - Track validated security findings
Tracks validated Codex Security findings as Linear, Jira, or GitHub issues, or as one draft GitHub security advisory.
Tags
Updated: 2026-10-08Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Validate sealed scan sources
- Select findings explicitly
- Resolve tracking destinations
- Check duplicate findings
- Preview exact payloads
- Request approval before writing
- Create or update tracked records
- Read back written records
Inputs
- Sealed scan directory
- Finding ID or fingerprint
- Selected provider
- Tracking destination
- Finding selection
- User approval
- Source repository details
Outputs
- Validation results
- Exact payload preview
- Linear issues
- Jira issues
- GitHub issues
- Draft GitHub security advisory
- Duplicate-check results
- Write readback results
Requirements
- Configured Python interpreter
- Linear native app for Linear tracking
- Atlassian native app for Jira tracking
- GitHub app or authenticated gh CLI
- Approval before mutations
- GitHub CLI for advisory mode
- Verified public canonical source repository for advisories