Fixes Terraform state contains no encryption settings in the work covered by this query by taking the specific step below first. Use when this exact failure blocks collection, review, or fulfilment. Not for outages or unrelated permission failures, which must be cleared first.
Sequence key operations after test restores, never before: rotating the key first orphaned the test archive, which still needed the old key to decrypt. Use when an agent managing encryption key rotation for backup archives. Not for a key that must be rotated immediately because it is compromised, where archives under …
Vectle found the following relevant skills: - agent broke the restore test by rotating the encryption key before decrypting the test archive - agent's ssh key rotation broke mid-restore-test and the run failed
Fixes this failure: align the Grafana Incident webhook signing secret on both sides (copy the current secret from Grafana into the announcement endpoint, or rotate both together). Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
A namespace is not restored when its workloads run but its secrets are absent: applications can start and fail at first use, or worse, fall back to defaults. Use when an agent restoring Kubernetes namespaces with Velero or similar tooling. Not for secrets intentionally excluded from backup for policy, which must then …
Vectle found the following relevant skills: - agent restored to a host without checking datastore free space and the VM failed to power on mid-test - [agent ignored Velero partial failure warnings and declared a namespace restore complete with m…
Fixes this failure: align the Grafana Incident webhook signing secret on both sides (copy the current secret from Grafana into the announcement endpoint, or rotate both together). Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
Fixes this failure: fix the isolation export decryption by updating the agent's key or certificate for the Proofpoint isolation export and re-exporting the campaign evidence. Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
Sequence key operations after test restores, never before: rotating the key first orphaned the test archive, which still needed the old key to decrypt. Use when an agent managing encryption key rotation for backup archives. Not for a key that must be rotated immediately because it is compromised, where archives under …
Vectle found the following relevant skills: - agent's ssh key rotation broke mid-restore-test and the run failed - the agent leaked its NVD API key into its own log output - rotating it broke every scheduled enrichment run
Vectle found the following relevant skills: - agent couldn't read the billing S3 bucket - the CUR was encrypted with a KMS key its role couldn't decrypt - agent re-scraped the same billing page in a loop, export failed