[releng release-5.8] gromit: sync templates

[probelabs]

Auto-generated from gromit templates by policy sync.

[github-actions]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ No major issues detected

[github-actions]

PR Code Suggestions ✨

Explore these optional code suggestions:

Category	Suggestion	Impact
Possible issue	Guard matrix inputs with defaults Default these workflow inputs to valid JSON arrays before passing them to the reusable workflow. If any upstream output is empty or omitted, a downstream fromJson in upgrade-tests.yml will fail the entire job at startup. .github/workflows/release.yml [1251-1253] -deb: ${{ needs.test-controller-distros.outputs.deb }} -rpm: ${{ needs.test-controller-distros.outputs.rpm }} -rpm_amd64: ${{ needs.test-controller-distros.outputs.rpm_amd64 }} +deb: ${{ needs.test-controller-distros.outputs.deb || '[]' }} +rpm: ${{ needs.test-controller-distros.outputs.rpm || '[]' }} +rpm_amd64: ${{ needs.test-controller-distros.outputs.rpm_amd64 || '[]' }} Suggestion importance[1-10]: 5 __ Why: This is a reasonable defensive change because empty deb/rpm outputs could break downstream fromJson usage in upgrade-tests.yml. However, the diff does not show that needs.test-controller-distros.outputs.* can actually be missing, so the impact is somewhat speculative.	Low

[sentinelone-cnapp-eu1]

SentinelOne CNS Hardcoded Secret Detector
✅ Congratulations, your code is safe

SentinelOne CNS is a cloud-agnostic, agentless CSPM & CWPP solution that continuously detects and prevents vulnerabilities that have the highest probability of being exploited in Azure, AWS, Google Cloud, and Kubernetes.

[sentinelone-cnapp-eu1]

SentinelOne CNS Hardcoded Secret Detector
✅ Congratulations, your code is safe

SentinelOne CNS is a cloud-agnostic, agentless CSPM & CWPP solution that continuously detects and prevents vulnerabilities that have the highest probability of being exploited in Azure, AWS, Google Cloud, and Kubernetes.

[github-actions]

🚨 Jira Linter Failed

Commit: 6c9d568
Failed at: 2026-07-21 09:02:05 UTC

The Jira linter failed to validate your PR. Please check the error details below:

🔍 Click to view error details

failed to get Jira issue: Jira issue RELEASE-5 not found (HTTP 404). The issue may exist but the API token may lack permission to access it. Verify that the token owner has access to the project and that JL_JIRA_BASEURL (https://api.atlassian.com/ex/jira/c25a3295-62f6-4d5a-8ddd-58122b144a37) is correct

Next Steps

• Ensure your branch name contains a valid Jira ticket ID (e.g., ABC-123)
• Verify your PR title matches the branch's Jira ticket ID
• Check that the Jira ticket exists and is accessible

---

This comment will be automatically deleted once the linter passes.

[sentinelone-cnapp-eu1]

SentinelOne CNS Hardcoded Secret Detector
✅ Congratulations, your code is safe

SentinelOne CNS is a cloud-agnostic, agentless CSPM & CWPP solution that continuously detects and prevents vulnerabilities that have the highest probability of being exploited in Azure, AWS, Google Cloud, and Kubernetes.

[sonarqubecloud]

Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

💡 Need a hand with PR review? Try Gitar by Sonar!