Vectle found the following relevant skills: - agent failed to access the crm: ip allowlist blocked its egress error - agent failed to access the erp: ip allowlist blocked its egress error
Fixes this failure: update the agent's pinned proxy certificate or CA bundle to the rotated proxy certificate, verify the new chain with a direct TLS check from a target host. Use when the exact error or symptom in the title appears. Not for a different error, tool, or a manual process with no such failure.
Fixes agent ERP access blocked by IP allowlisting with stable egress addresses. Use when an agent's ERP calls are rejected because its egress IP is not allowlisted. Not for credential failures.
Fixes semgrep secrets scans that fail fetching the rule registry in CI by vendoring the ruleset or fixing runner egress and proxy settings. It covers offline operation and pinned rulesets. Not for writing custom semgrep rules.
Vectle found the following relevant skills: - cargo "failed to download" in CI: network and registry debugging - how to write a custom Semgrep rule - [Kubernetes "failed t…
Vectle found the following relevant skills: - the agent's severity override was lost when the finding was re-imported - the ticket reopened at critical - agent's CVE prioritization ignored EPSS: severity-only ranking fix
Vectle found the following relevant skills: - the triage agent burned its whole ticketing API quota re-filing false positives before it reached the real CVEs - docs agent failed after hitting GitHub API rate limit mid repo scan
Fixes an agent failing to access the repo host because IP allowlisting blocked its egress: allowlist the runner or use a self-hosted runner. Use when egress IP blocks break agents. Not for auth errors.
Vectle found the following relevant skills: - agent failed to access the crm: ip allowlist blocked its egress error - agent failed to access the warehouse: ip allowlist blocked its egress
Vectle found the following relevant skills: - trivy and grype report the same OpenSSL CVE under different identifiers - the agent opened two tickets and nobody... - [cost agent double-counted spend - it summed both the payer and the linked accou…
Fixes cargo-deny refusing to fetch the RustSec advisory database over signature verification: distinguishing stale signing keys from proxy-tampered fetches, updating cargo-deny, and trusting the corporate CA for the git fetch. Use when the advisory DB fetch fails on signature verification. Not for cargo-deny policy vi…
Vectle found the following relevant skills: - the agent marked a CVE fixed, but the rescan still flagged it - the patch bumped the wrong package in a multi-stage... - [trivy reports CVEs in Ubuntu ESM packages with "no fixed version available" -…
Corrects the dangerous misreading of empty trivy results on Windows container images: trivy analyzes Linux package metadata it cannot find on Windows, so zero findings means unscanned, not clean. Covers marking coverage honestly and adding Windows-capable scanning. Use when trivy reports nothing on windows/amd64 image…
Vectle found the following relevant skills: - the SBOM missed transitive dependencies - the agent scanned the SBOM and declared the image clean, but trivy on the... - agent's pdf merger broke with error on scanned image pdfs
Recovers from trivy layer-not-found failures caused by registry garbage collection deleting blobs mid-scan: confirming the pruned blobs, re-pushing the image so the manifest resolves, and scheduling GC away from scan windows. Use when a previously scannable image suddenly fails with layer not found. Not for network ti…
Vectle found the following relevant skills: - trivy scan fails with "failed to analyze layer: unexpected EOF" mid-pull on a flaky registry - trivy scan fails with "failed to get image manifest: manifest unknown" on a multi-arch image