Skip to content

Use GPT-5.5 for security workflows - #17

Draft
ulziibay-kernel wants to merge 1 commit into
mainfrom
hypeship/use-gpt-5-5
Draft

Use GPT-5.5 for security workflows#17
ulziibay-kernel wants to merge 1 commit into
mainfrom
hypeship/use-gpt-5-5

Conversation

@ulziibay-kernel

Copy link
Copy Markdown
Contributor

Summary

  • replace Claude Code and Cursor agent invocations with Codex CLI
  • run Semgrep triage, container triage/remediation, and dependency fallback remediation on gpt-5.5
  • authenticate through OPENAI_API_KEY so OpenAI organization access and safeguards apply
  • remove obsolete Anthropic/Cursor secret and model-variable documentation

Prerequisite

OPENAI_API_KEY must be available as an organization or repository Actions secret to every consuming repository before merge.

Validation

  • python3 -m unittest scripts.test_vuln_remediation (17 tests)
  • go run github.com/rhysd/actionlint/cmd/actionlint@v1.7.7
  • git diff --check

A live remediation run was not triggered because it requires the organization Actions secret and can create remediation changes in a consumer repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant