track-findings - Track validated security findings
Tracks selected Codex Security findings as Linear, Jira, or GitHub issues, or as one draft GitHub security advisory, with duplicate checks and approval-gated writes.
Tags
Updated: 2026-10-06Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Validate sealed scan sources
- Select findings explicitly
- Resolve tracking destinations
- Check for duplicates
- Preview exact payloads
- Request approval before writing
- Create or update issues
- Create draft advisories
- Read back tracked results
Inputs
- Sealed Codex Security scan directory
- Finding ID or fingerprint
- Explicit finding selection
- Provider and destination choice
- Source repository information
- Approval to write
- Provider credentials
Outputs
- Exact tracking payload preview
- Created or updated Linear issues
- Created or updated Jira issues
- Created or updated GitHub issues
- Draft GitHub security advisory
- Duplicate-check results
- Tracking readback results
Requirements
- Configured Python interpreter
- Linear native app for Linear tracking
- Atlassian Rovo app for Jira tracking
- GitHub app or authenticated gh CLI
- Required destination read and write permissions
- Full advisory reference for GitHub advisory work
- Full Jira reference for Jira work