Vishnu Narayanan 941c8a86b4 fix: use a dedicated PAT for ghsa linear sync gh action (#14364) ...

The default `GITHUB_TOKEN` cannot read `security-advisories`; that endpoint requires the `repository_advisories` permission, which is not available to the GitHub Actions installation token.

Switched to a fine-grained PAT stored in `GHSA_READ_TOKEN`.

Tested locally: the same PAT returns the full triage list

Changes
----
- Switch to custom token
- Add a discord alert for new advisories
- Switch to python

2026-05-05 17:20:22 +05:30

860 B

Raw Blame History

View Raw