TEST PR [IGNORE PLEASE]

.github/workflows/slack-alerts.yml

@@ -8,21 +8,34 @@
   send-slack-alert:
     runs-on: ubuntu-latest
     steps:
-    - name: Post to a Slack channel
-      id: slack
-      uses: slackapi/slack-github-action@v1.23.0
-      with:
-        channel-id: 'h2o-3-github-issues'
-        payload: |
-          {
-            "text": ":github: *H2O-3 GitHub Issue Opened*",
-            "attachments": [
-              {
-                "text": "*Title:* ${{ github.event.issue.title }}\n*Link:* ${{ github.event.issue.html_url }}",
-                "color": "good",
-                "fallback": "Build Alert"
-              }
-            ]
-          }
-      env:
-        SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
+      - name: Check issue title and URL
+        id: check
+        env:
+          ISSUE_TITLE: ${{ github.event.issue.title }}
+          ISSUE_URL: ${{ github.event.issue.html_url }}
+        run: |
+          if [[ ! "$ISSUE_TITLE" =~ ^[a-zA-Z0-9\ \-\_\:\'\(\)\`]+$ ]]; then
+            echo "Invalid characters in issue title"
+            exit 1
+          fi
+          echo "TITLE=$ISSUE_TITLE" >> $GITHUB_ENV
+          echo "URL=$ISSUE_URL" >> $GITHUB_ENV
+
+      - name: Post to a Slack channel
+        id: slack
+        uses: slackapi/slack-github-action@v1.23.0
+        with:
+          channel-id: "h2o-3-github-issues"
+          payload: |
+            {
+              "text": ":github: *H2O-3 GitHub Issue Opened*",
+              "attachments": [
+                {
+                  "text": "*Title:* ${{ env.TITLE }}\n*Link:* ${{ env.URL }}",
+                  "color": "good",
+                  "fallback": "Build Alert"
+                }
+              ]
+            }
+        env:
+          SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}

.github/workflows/trigger-h2o-3-devops.yml

@@ -0,0 +1,23 @@
+# .github/workflows/trigger-h2o-3-devops.yml
+name: Trigger H2O-3 DevOps Workflows
+
+permissions:
+  contents: read
+
+on:
+  push:
+    branches: [master, rel-3.46.0]
+  workflow_dispatch:
+
+jobs:
+  trigger:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Trigger Vulnerability Scan
+        run: |
+          curl -X POST \
+            -H "Accept: application/vnd.github+json" \
+            -H "Authorization: Bearer ${{ secrets.H2O_3_DEVOPS_REPO_TOKEN }}" \
+            -H "X-GitHub-Api-Version: 2022-11-28" \
+            https://api.github.com/repos/h2oai/h2o-3-devops/dispatches \
+            -d '{"event_type":"h2o3-push","client_payload":{"branch":"${{ github.ref_name }}","sha":"${{ github.sha }}"}}'

.gitignore

@@ -114,3 +114,5 @@ leak-check.out
 
 # Terraform
 .terraform/
+
+.claude/