golem15/msd-core
4
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

fix(#1625): resolve security config in secure-phase.md before auditor handoff (#1633)

Browse Source
This commit is contained in:
Tom Boucher
2026-06-23 17:24:59 -04:00
committed by GitHub
parent 01ef08ed2a
commit 94be6d5b60
4 changed files with 87 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
.changeset/kind-deer-rest.md Normal file
View File

@@ -0,0 +1,5 @@
---
type: Fixed
pr: 1633
---
**`/gsd:secure-phase` now honors the configured ASVS level and block threshold** — the security auditor previously received unsubstituted `{SECURITY_ASVS}` / `{SECURITY_BLOCK_ON}` placeholder text because secure-phase.md never assigned those variables. It now resolves `workflow.security_asvs_level` and `workflow.security_block_on` from config (`--raw`) before the auditor handoff. (#1625)