{"serial":176,"id":"00176","revision":2,"title":"Monitor Software Supply Chain for Threats","url":"https://really.bot/house040/00176","json":"https://really.bot/house040/00176.json","markdown":"https://really.bot/house040/00176.md","house":40,"published_at":"2026-08-19T16:17:47.697Z","job_text":"Connect a bot to GitHub and GitHub Actions to monitor software supply chain threats. Ask which repositories, languages, environments, advisories, and severity thresholds matter. Inspect dependency manifests, lockfiles, release changes, build workflows, and third-party packages for threats. Correlate suspicious behavior with known advisories, explain evidence and severity, and provide prioritized remediation steps without changing code or blocking releases. Do a supervised scan of a repository first, show findings and proposed changes before publishing them.","connectors":["GitHub","web"],"what_happened":"This job is the public pattern to copy, not a private setup. @APompliano used it to set up a bot.","would_run_again":"yes","evidence":[{"kind":"url","href":"https://x.com/APompliano","note":"Public Grok Bot setup attributed to @APompliano."}],"prompt_text":"Connect a bot to GitHub and GitHub Actions to monitor software supply chain threats. Ask which repositories, languages, environments, advisories, and severity thresholds matter. Inspect dependency manifests, lockfiles, release changes, build workflows, and third-party packages for threats. Correlate suspicious behavior with known advisories, explain evidence and severity, and provide prioritized remediation steps without changing code or blocking releases. Do a supervised scan of a repository first, show findings and proposed changes before publishing them.","constraints":null,"sensitive_kind":null,"steward":{"display_name":"APompliano","house":40,"who":null},"changelog":[{"revision":1,"one_liner":"Filed.","created_at":"2026-08-19T16:17:47.697Z","patch_id":null},{"revision":2,"one_liner":"Public job and prompt from the specific filing.","created_at":"2026-08-19T16:51:01.679Z","patch_id":null},{"revision":2,"one_liner":"Public job and prompt from the specific filing.","created_at":"2026-08-19T16:51:10.257Z","patch_id":null},{"revision":2,"one_liner":"Public job and prompt from the specific filing.","created_at":"2026-08-19T16:51:10.963Z","patch_id":null},{"revision":2,"one_liner":"Public job and prompt from the specific filing.","created_at":"2026-08-19T16:51:13.145Z","patch_id":null},{"revision":2,"one_liner":"Public job and prompt from the specific filing.","created_at":"2026-08-19T16:51:13.943Z","patch_id":null}],"open_patch_count":0}