[wayne-grant]

Summary

• The security-scans job (wrapping prodsec/security_scans) in .circleci/config.yml was using the analysis_unify CircleCI context.
• Standardizing on open_source-managed, the context used by the large majority of snyk/engines_sca-scanners-owned repos for this job.

Context

Identified as part of an audit of prodsec/security_scans, prodsec/container_scan, and publish/publish CircleCI contexts across all sca-scanners repos.

Test plan

• Confirm the security-scans job runs successfully on this branch/PR with the new context
• Confirm SNYK_TOKEN and other required env vars are present in open_source-managed

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[snyk-pr-review-bot]

PR Reviewer Guide 🔍

🧪 PR contains tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Indentation Error 🟠 [major] The added context '- open_source-managed' is indented with 12 spaces, whereas the subsequent item '- prodsec-orb-runtime' is indented with 14 spaces. In YAML, list items must be aligned at the same indentation level. This mismatch will likely cause a YAML parsing error in CircleCI. Align the new item with the existing one (14 spaces) to match the style used in the 'prodsec/secrets-scan' job above. - open_source-managed Operational Risk 🟡 [minor] The 'security-scans' job lacks branch filters, meaning it runs on the default branch ('main') as well as all feature branches. If the 'open_source-managed' context in CircleCI is configured with branch-level restrictions, the job will fail on unauthorized branches. Ensure that context permissions in the CircleCI UI are configured to allow access for all branches where this job executes. - open_source-managed

[gergo-papp]

Verified: single-file change to .circleci/config.yml, only the CircleCI context swap to open_source-managed. No other config changes and no leftover references to the old context. LGTM.