jobtrackingapp/automation/prompts/jobjakt-security/templates/CODEX_SECURITY_SCAN_REGISTER_TEMPLATE.md

Jobjakt — Codex Security Scan Register

Template only. Every entry must describe an actually attempted action, not an intended scan. No raw secrets/PII in this file.

Scope baseline

• Project / authorized repo: TODO
• Approved branch and Git SHA: TODO
• Owner authorization / staging ROE file: TODO
• Installed Codex Security verified in this session?: TODO
• Approved paid usage / runtime budget: TODO / PENDING
• Production and third-party hosts: OUT OF SCOPE

Scans and workflow calls

Date	Phase	Skill / workflow	Repo path, branch and SHA or diff	Status	Scan ID / artifact path	Actual coverage and omissions	Findings IDs / disposition	Billing approval or blocker
TODO	01	$codex-security:security-scan	TODO	NOT RUN	N/A	N/A	N/A	N/A
TODO	03	$codex-security:deep-security-scan	TODO	NOT RUN	N/A	N/A	N/A	PENDING
TODO	15	$codex-security:security-scan	TODO	NOT RUN	N/A	N/A	N/A	N/A
TODO	15	$codex-security:security-diff-scan	TODO	NOT RUN	N/A	N/A	N/A	N/A

Allowed statuses: COMPLETED, FAILED, BLOCKED, NOT RUN. A completed scan can still have PARTIAL coverage; explain omissions.

Finding lifecycle

Finding ID	Source scan ID	Evidence and risk summary (redacted)	Validated status	Fix commit	Verify-fix verdict	Retest evidence	Closure approval
TODO	TODO	TODO	UNVERIFIED	N/A	INCONCLUSIVE	N/A	OPEN

Final reviewer declaration

• Full baseline standard scan complete? TODO
• Full baseline deep scan complete (approved)? TODO
• Final full standard rescan complete? TODO
• Diff scan over all fixes complete? TODO
• Critical/high unresolved? TODO
• Out-of-scope components / skipped checks: TODO
• Human reviewer and GO/NO-GO: TODO