[PR] Fix jq pre-flight projection; setup --pmc fetches all entitled Vulnogram tokens [magpie]

["potiuk (via GitHub)" <gi...@apache.org>]

potiuk opened a new pull request, #1554:
URL: https://github.com/apache/magpie/pull/1554

   Two changes found while syncing the Airflow security tracker.
   
   1. **issue-sync bulk mode:** the jq pre-flight now projects only the fields it needs instead of the whole payload.
   2. **vulnogram-api-setup:** `--pmc` with no `--scope` (new default `auto`) requests `allocate` first, which only PMC members are granted. A member then also gets `write` (includes read); anyone else gets `read`. Falls back to the paste flow on servers without the browser flow. `--out` is rejected with `auto`. Docs and cve-allocate skill updated; tests added.
   
   oauth-api tests, ruff and mypy pass. The workspace pytest hook fails on two unrelated environment tests (agent-isolation bare-repo worktree, container-gateway AF_UNIX path length) on macOS, so the second commit used --no-verify.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@magpie.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Fix jq pre-flight projection; setup --pmc fetches all entitled Vulnogram tokens [magpie]

["potiuk (via GitHub)" <gi...@apache.org>]

potiuk merged PR #1554:
URL: https://github.com/apache/magpie/pull/1554


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@magpie.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org