Using backport tool for fixing CVE, it finds issues of type task instead of vulnerability type

[zdohnal]

What happened? What is the problem?

Being in the dir below cloned Vim repository, I called backport tool in claude:

/backport CVE-2026-35177 fix to rhel-9.8.0 and c8s

It correctly found fix from rhel-10.2 branch and branches where to work next, but finding tickets was bit problematic - it found issues of type task instead of type vulnerability, which are needed to be referenced in spec and git changelog for Product Security automation to work.

Log of the specific part of Claude session - log.txt

Thank you in advance for looking into it!

What did you expect to happen?

Find the issues of vulnerability type, omit task type.

Example URL(s)

No response

Steps to reproduce

1. run the skill backport for CVE which has main issue of vulnerability type, and there are issues of type task linked to the main issue, containing the CVE number in summary

Workaround

• There is an existing workaround that can be used until this issue is fixed.

Participation

• I am willing to submit a pull request for this issue. (Packit team is happy to help!)

Used app and model:

Claude Code v2.1.145
Opus 4.6 · Google Vertex AI