fix: route CVEs to Linear on-call

Author: brendan-kellam

.github/scripts/test-vulnerability-triage.sh

@@ -38,6 +38,9 @@ assert_workflow_contains "pins assets to the called workflow revision" 'ref: ${{
 assert_workflow_contains "uses the shared match filter" '-f .vulnerability-triage-workflow/.github/scripts/match-vulnerability-issue.jq'
 assert_workflow_contains "uses the shared classification filter" '-f .vulnerability-triage-workflow/.github/scripts/classify-vulnerability-issues.jq'
 assert_workflow_contains "uses the retrying Linear GraphQL client" '.vulnerability-triage-workflow/.github/scripts/linear-graphql-request.sh'
+assert_workflow_contains \
+  "leaves new CVEs unassigned for Linear's on-call triage rotation" \
+  $'      assign_to_api_key_owner:\n        description: \'Assign issues to the Linear API key owner when linear_assignee_id is empty. Leave disabled to allow Linear Triage responsibility to assign the on-call responder.\'\n        required: false\n        type: boolean\n        default: false'
 
 FAKE_CURL_DIR=$(mktemp -d)
 FAKE_CURL_COUNT=$(mktemp)

.github/workflows/vulnerability-triage.yml

@@ -46,15 +46,15 @@ on:
         type: boolean
         default: false
       linear_assignee_id:
-        description: 'Linear user UUID to assign. Leave empty to use assign_to_api_key_owner behavior.'
+        description: 'Linear user UUID to assign. Leave empty to create issues unassigned unless assign_to_api_key_owner is enabled.'
         required: false
         type: string
         default: ''
       assign_to_api_key_owner:
-        description: 'Assign issues to the Linear API key owner when linear_assignee_id is empty.'
+        description: 'Assign issues to the Linear API key owner when linear_assignee_id is empty. Leave disabled to allow Linear Triage responsibility to assign the on-call responder.'
         required: false
         type: boolean
-        default: true
+        default: false
       linear_state_name:
         description: 'Linear workflow state for newly created or reopened issues.'
         required: false