Claude d1d1a95991 Add CI enrichment job that commits vuln_db.json back to PR ... Replaces the old enrichment-dry-run job with an enrich job that: - Only runs on pull requests (not push to main) - Checks out the PR branch (not merge ref) so it can push back - Builds with --release for faster enrichment - Uses --existing-db to resume from the committed vuln_db.json - Enriches up to 20 new advisories with a 25-min timeout - Commits and pushes updated vuln_db.json if it changed - Also uploads as an artifact for inspection The workflow has contents: write permission so the bot can push commits to the PR branch. https://claude.ai/code/session_01P1LKP6aqGt68rQAXrF6kSE		2026-03-25 15:15:01 +00:00
..
workflows	Add CI enrichment job that commits vuln_db.json back to PR	2026-03-25 15:15:01 +00:00