log-lightning-issues

The artifact performs a legitimate operational function (file issues from audit findings) and is not itself malicious code. However it presents a moderate-to-high operational security risk because it routes potentially sensitive audit output (macaroons, seeds, TLS keys, etc.) directly into GitHub issues and local runtime artifacts without redaction, least-privilege token guidance, or approval controls. Treat usage as risky in repositories that may contain secrets until mitigations (sanitization, vault references, scoped tokens, approval gates) are implemented.