security: fleet repos not audited — GitHub session scope too narrow (2026-07)

[dominicci13]

Monthly security sweep — incomplete due to repo access

The July 2026 automated dependency security sweep ran against the Focus Camera automation fleet but could only access shared-python-utils (see PR #5 for those fixes). All other target repos were rejected with:

Access denied: repository "dominicci13/…" is not configured for this session. Allowed repositories: dominicci13/shared-python-utils

Repos that need to be audited manually (or via a session with broader scope)

Repo	Pattern
amzn-account-health	amzn-*
amzn-aged-report	amzn-*
amzn-all-orders	amzn-*
amzn-catalog-health	amzn-*
amzn-feedback-manager	amzn-*
amzn-inbound-conciliation	amzn-*
amzn-prime-orders	amzn-*
amzn-shipments	amzn-*
amzn-top-sales	amzn-*
bb-sellerhub-report	bb-*
ebay-account-health	ebay-*
ebay-avg-sold-price	ebay-*
ebay-best-offers	ebay-*
ebay-items-categories	ebay-*
ebay-returns	ebay-*
ebay-sellerportal-submission	ebay-*
all-dashboards-report	—
sellercloud-sync	—

What to look for

Based on the shared-python-utils findings, these packages are high-priority if they appear in any repo's requirements.txt:

Package	Vulnerable below	Fix version	Key advisories
pillow	12.3.0	12.3.0	PYSEC-2026-2253/54/55/56/57, PYSEC-2026-165/2874, PYSEC-2026-457/1793
selenium	4.14.0	4.14.0	PYSEC-2023-206
cryptography	46.0.5	46.0.6	PYSEC-2026-2141 + multiple older advisories
urllib3	2.6.3	2.6.3	PYSEC-2026-1996 + multiple older advisories
requests	2.33.0	2.33.0	PYSEC-2026-2275
idna	3.15	3.15	PYSEC-2026-215
h11	0.16.0	0.16.0	PYSEC-2026-348
pymysql	1.1.1	1.1.1	PYSEC-2026-502

To re-run the sweep with full access

Re-trigger the scheduled routine from a Claude Code session (web or CLI) that is authenticated with a GitHub token scoped to all the repos above, or add each repo to the allowed list for the existing remote environment.