JMR-dev 994ea8a3dd Say in the step log that the summary was written, since nothing else can ...

The job summary is the deliverable #83 asked for -- "readable without opening a
log" -- and GitHub exposes no API that reads a job summary back: the check-run
output for the advisory job returns summary: null, so a write that silently did
not happen would be invisible to everything except a human on the run page. The
step log can be read, so it now carries one line saying which of the two
happened, including the case where GITHUB_STEP_SUMMARY is unset entirely, which
is what running the script by hand looks like.

2026-08-25 20:23:05 -05:00

..

scripts

Say in the step log that the summary was written, since nothing else can

2026-08-25 20:23:05 -05:00

workflows

Say what the advisory API 37 job actually found, so a new failure is not invisible

2026-08-25 16:04:13 -05:00