Repository navigation
fix(assessment): clarify severity and preflight result guidance - #45
Merged
Merged
Conversation
ai-coding-guardrails-jon-sandbox
Bot
added
the
zenable/risk:low
JonZeolla
commented
Oct 20, 2026
JonZeolla
marked this pull request as ready for review
October 20, 2026 14:09
JonZeolla
enabled auto-merge (squash)
October 20, 2026 14:09
![ai-coding-guardrails[bot]](https://avatars.githubusercontent.com/in/1202546?s=60&v=4){kind=small}
There was a problem hiding this comment.
Nice work! 😎
I didn't find anything of concern
Risk: 🟢 Low
Did you know Zenable also supports GitLab SaaS and self-managed?
|
Merged by Zenable: assessed low risk at 96c75b4; merge initiated by @JonZeolla via auto-merge. Human review was waived by your merge-gate policy. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The assessment template told authors to omit severity, although the renderer reads that field and the bundle metadata counts it. A fresh Fast assessment produced zero metadata findings until the author restored severity. Make the instructions match the existing renderer contract: severity is explicit; likelihood, impact, and their matrix buckets are derived.
Rename two setup preflight result labels so the agent does not mistake them for CLI commands. The underlying commands are unchanged.
Validation: documentation and comments only. No local tests run; CI validates this change.
PR Description from Zenable
Fixes the assessment template instructions, which told authors to omit severity even though the renderer reads it and bundle metadata counts it. Also renames two setup preflight result labels so the agent doesn't mistake them for CLI commands.
Documentation and comments only; no local tests run.