stackrox · robbycochran · Sep 18, 2026 · Sep 17, 2026 · Sep 17, 2026 · Sep 17, 2026
@@ -1,30 +1,30 @@
 # ACS CI nightly
 
-This task runs the read-only CI-failure portion of the ACS triage agent. It
-queries the StackRox Prow result bucket, analyzes recent nightly
-failures, and writes `ci-triage.json` without creating or updating Jira
-issues.
+This task runs the ACS repository's canonical `scripts/run-triage.sh` inside a
+read-only OpenShell sandbox. The ACS repository owns the Prow/GCS lookup and
+triage logic; this Harness bundle provides the generic OpenShell task wiring
+and provider-backed connections. The task produces the normal triage report
+without creating or updating Jira issues or posting to Slack.
 
-The task is intentionally narrower than the full ACS triage workflow. It is a
-first consumer contract for `acs-triage-agent`; Jira/community triage and
-publication can be added as separate task bundles after this contract is
-validated.
+The task is intentionally read-only: Jira and community triage may inspect
+their sources, while the Jira updater and Slack publication remain disabled.
 
 ## Contract
 
 - Trigger: a trusted repository workflow chooses when to run it. The task has
   no scheduler or GitHub Actions trigger of its own.
 - Trusted inputs: the workflow document, `ACS_TRIAGE_REF`, `TRIAGE_RUN_URL`,
   the gateway target, provider names, and the pinned `stackrox-ci` image.
-- Untrusted input: the checked-out `stackrox/acs-triage-agent` source and the
-  Prow result data it reads. Neither is allowed to define providers, policy,
-  image, or commands.
+- Task input: the checked-out `stackrox/acs-triage-agent` source owns the
+  collector and analysis logic. The source and Prow result data cannot change
+  the provider identities, policy, image, or workflow wiring defined here.
 - External operations: public GitHub clone/fetch and read-only Prow GCS and
   Jira queries. The task cannot push source, create or update Jira issues, or
   publish to Slack.
-- Output: `/sandbox/acs-triage-agent/artifacts/ci-triage.json`, downloaded to
-  the caller's output directory. The output is optional so partial diagnostics
-  can still be retained when analysis fails.
+- Outputs: the normal ACS artifacts, including `ci-triage.json`,
+  `triage-report.md`, and `slack-summary.txt`, downloaded to the caller's
+  output directory. They are optional so partial diagnostics can still be
+  retained when analysis fails.
 - Cleanup: the sandbox and host-side source staging are removed after outputs
   are downloaded. Downloaded artifacts and any external reads remain with the
   caller.
@@ -36,6 +36,7 @@ workflow:
 
 - `vertex-claude-triage` and the matching `inference.local` route;
 - `atlassian-triage-read`, configured for read-only Jira/Confluence access;
+- `github-triage-read`, configured for read-only project and issue queries;
 - `prow-gcs-read`, created from OpenShell's built-in `google-cloud` provider
   profile and configured with gateway-managed Google service-account JWT
   refresh for read-only access to the `test-platform-results-public` bucket.

@@ -4,8 +4,8 @@ The task policy is an overlay for the shared `sandbox-stackrox-ci` image. The
 image supplies the runtime tools; this directory supplies task-specific
 network permissions and provider-profile metadata.
 
-Import the Atlassian endpointless provider profile through trusted platform
-bootstrap, then create matching read-only provider instances. Create
+Import the Atlassian and GitHub endpointless provider profiles through trusted
+platform bootstrap, then create matching read-only provider instances. Create
 `prow-gcs-read` from OpenShell's built-in `google-cloud` profile and configure
 its gateway-managed service-account JWT refresh. The Harness CLI only verifies
 and attaches those instances; it does not provision or manage their
@@ -25,6 +25,7 @@ workflow or payload, and gcloud therefore uses the OpenShell-managed
 short-lived provider token rather than a local account or service-account key.
 
 The `github_git` policy is intentionally unauthenticated and read-only because
-the StackRox repositories used by this task are public. The Atlassian and Prow
-GCS provider instances remain gateway-owned; repository source being public
-does not make those data sources public.
+the StackRox repositories used by this task are public. GitHub project and
+issue API calls use the gateway-managed `github-triage-read` provider. The
+Atlassian and Prow GCS provider instances remain gateway-owned; repository
+source being public does not make those data sources public.
@@ -51,6 +51,8 @@ network_policies:
         protocol: rest
         tls: terminate
         enforcement: enforce
+        credential_binding:
+          provider: github-triage-read
         rules:
           - allow:
               method: GET

@@ -0,0 +1,18 @@
+# Endpointless read-only GitHub profile for ACS triage.
+# The provider instance is gateway-owned; no token belongs in this repository.
+id: github-triage-read
+display_name: GitHub ACS triage read-only
+description: Gateway-managed GitHub credential for read-only project and issue queries
+category: source_control
+credentials:
+  - name: api_token
+    description: Gateway-managed GitHub token
+    env_vars: [GITHUB_TOKEN, GH_TOKEN]
+    required: true
+    auth_style: bearer
+    header_name: authorization
+discovery:
+  credentials: [api_token]
+binaries:
+  - /usr/bin/gh
+  - /usr/bin/curl