From 07d9592cc98b23063082076ef10e1963ac3dc742 Mon Sep 17 00:00:00 2001
From: hilram7 <212961752+hilram7@users.noreply.github.com>
Date: Mon, 6 Apr 2026 14:39:28 -0400
Subject: [PATCH 01/17] feat(md-autofix): scaffold script with detection
 functions and tests

---
 scripts/md-extension-autofix.sh      |  54 ++++++++++++
 scripts/test-md-extension-autofix.sh | 121 +++++++++++++++++++++++++++
 2 files changed, 175 insertions(+)
 create mode 100644 scripts/md-extension-autofix.sh
 create mode 100644 scripts/test-md-extension-autofix.sh

diff --git a/scripts/md-extension-autofix.sh b/scripts/md-extension-autofix.sh
new file mode 100644
index 0000000000..ac95073e8e
--- /dev/null
+++ b/scripts/md-extension-autofix.sh
@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+# md-extension-autofix.sh — detect and fix missing .md extensions in docs/ files
+# Usage: md-extension-autofix.sh <changed-files-list>
+# Output: JSON summary to stdout
+set -euo pipefail
+
+# Extensions that are intentionally non-markdown — never rename these
+IGNORE_EXTENSIONS=("html" "htm" "py" "ps1" "plantuml" "tmp" "DS_Store" "png" "jpg" "jpeg" "webp" "gif" "svg" "pdf" "zip" "json" "js" "mjs" "ts" "sh" "yml" "yaml" "css" "txt" "xml" "csv" "lock")
+
+has_extension() {
+  local file="$1"
+  local basename
+  basename=$(basename "$file")
+  [[ "$basename" == *.* ]]
+}
+
+is_ignored_extension() {
+  local file="$1"
+  local basename ext
+  basename=$(basename "$file")
+  ext="${basename##*.}"
+  if [ "$ext" = "$basename" ]; then
+    return 1  # no extension
+  fi
+  for ignored in "${IGNORE_EXTENSIONS[@]}"; do
+    if [ "$ext" = "$ignored" ]; then
+      return 0
+    fi
+  done
+  return 1
+}
+
+is_markdown_content() {
+  local file="$1"
+  local has_frontmatter=0
+  local has_heading=0
+  if head -10 "$file" | grep -qE '^---'; then
+    has_frontmatter=1
+  fi
+  if grep -qE '^#{1,6} ' "$file"; then
+    has_heading=1
+  fi
+  [ "$has_frontmatter" -eq 1 ] && [ "$has_heading" -eq 1 ]
+}
+
+# Allow sourcing for tests
+case "${1:-}" in
+  --test)
+    return 0 2>/dev/null || exit 0
+    ;;
+esac
+
+echo "Not yet implemented" >&2
+exit 1
diff --git a/scripts/test-md-extension-autofix.sh b/scripts/test-md-extension-autofix.sh
new file mode 100644
index 0000000000..1999c4118f
--- /dev/null
+++ b/scripts/test-md-extension-autofix.sh
@@ -0,0 +1,121 @@
+#!/usr/bin/env bash
+# test-md-extension-autofix.sh — unit tests for md-extension-autofix.sh
+set -euo pipefail
+
+# Source just the functions (--test mode skips the main script logic)
+source "$(dirname "$0")/md-extension-autofix.sh" --test
+
+PASS=0
+FAIL=0
+
+assert_true() {
+  local label="$1"
+  local result="$2"
+  if [ "$result" = "0" ]; then
+    PASS=$((PASS + 1))
+  else
+    FAIL=$((FAIL + 1))
+    echo "FAIL (expected true): $label"
+  fi
+}
+
+assert_false() {
+  local label="$1"
+  local result="$2"
+  if [ "$result" != "0" ]; then
+    PASS=$((PASS + 1))
+  else
+    FAIL=$((FAIL + 1))
+    echo "FAIL (expected false): $label"
+  fi
+}
+
+# ---- has_extension ----
+
+has_extension "docs/kb/some-article" && R=$? || R=$?
+assert_false "no extension: docs/kb/some-article" "$R"
+
+has_extension "docs/kb/some-article.md" && R=$? || R=$?
+assert_true "has extension: .md" "$R"
+
+has_extension "docs/kb/.DS_Store" && R=$? || R=$?
+assert_true "has extension: .DS_Store (hidden file with ext)" "$R"
+
+has_extension "docs/kb/script.ps1" && R=$? || R=$?
+assert_true "has extension: .ps1" "$R"
+
+# ---- is_ignored_extension ----
+
+is_ignored_extension "docs/kb/article.ps1" && R=$? || R=$?
+assert_true "ignored: .ps1" "$R"
+
+is_ignored_extension "docs/kb/diagram.plantuml" && R=$? || R=$?
+assert_true "ignored: .plantuml" "$R"
+
+is_ignored_extension "docs/kb/advisory.html" && R=$? || R=$?
+assert_true "ignored: .html" "$R"
+
+is_ignored_extension "docs/kb/no-extension" && R=$? || R=$?
+assert_false "not ignored: no extension" "$R"
+
+is_ignored_extension "docs/kb/article.md" && R=$? || R=$?
+assert_false "not ignored: .md" "$R"
+
+# ---- is_markdown_content ----
+
+TMPDIR_TEST=$(mktemp -d)
+
+# File with both frontmatter and heading → markdown
+cat > "$TMPDIR_TEST/good.md" <<'EOF'
+---
+title: Test
+---
+
+# My Heading
+
+Some content here.
+EOF
+is_markdown_content "$TMPDIR_TEST/good.md" && R=$? || R=$?
+assert_true "markdown: has frontmatter and heading" "$R"
+
+# File with only heading, no frontmatter → not markdown
+cat > "$TMPDIR_TEST/no-frontmatter" <<'EOF'
+# My Heading
+
+Some content here.
+EOF
+is_markdown_content "$TMPDIR_TEST/no-frontmatter" && R=$? || R=$?
+assert_false "not markdown: heading only, no frontmatter" "$R"
+
+# File with only frontmatter, no heading → not markdown
+cat > "$TMPDIR_TEST/no-heading" <<'EOF'
+---
+title: Test
+---
+
+Some content here with no heading.
+EOF
+is_markdown_content "$TMPDIR_TEST/no-heading" && R=$? || R=$?
+assert_false "not markdown: frontmatter only, no heading" "$R"
+
+# Empty file → not markdown
+touch "$TMPDIR_TEST/empty"
+is_markdown_content "$TMPDIR_TEST/empty" && R=$? || R=$?
+assert_false "not markdown: empty file" "$R"
+
+# PowerShell script → not markdown
+cat > "$TMPDIR_TEST/script.ps1" <<'EOF'
+param([string]$AgentPath)
+Write-Host "Installing agent..."
+Start-Process $AgentPath
+EOF
+is_markdown_content "$TMPDIR_TEST/script.ps1" && R=$? || R=$?
+assert_false "not markdown: powershell script" "$R"
+
+rm -rf "$TMPDIR_TEST"
+
+echo ""
+echo "Results: $PASS passed, $FAIL failed"
+if [ "$FAIL" -gt 0 ]; then
+  exit 1
+fi

From 98bd264e228d23c32fc79d9164806c63b65b9193 Mon Sep 17 00:00:00 2001
From: hilram7 <212961752+hilram7@users.noreply.github.com>
Date: Mon, 6 Apr 2026 14:51:00 -0400
Subject: [PATCH 02/17] feat(md-autofix): add link rewriting function with
 tests

---
 scripts/md-extension-autofix.sh      | 13 +++++++++++
 scripts/test-md-extension-autofix.sh | 34 ++++++++++++++++++++++++++++
 2 files changed, 47 insertions(+)

diff --git a/scripts/md-extension-autofix.sh b/scripts/md-extension-autofix.sh
index ac95073e8e..2972b7a094 100644
--- a/scripts/md-extension-autofix.sh
+++ b/scripts/md-extension-autofix.sh
@@ -43,6 +43,19 @@ is_markdown_content() {
   [ "$has_frontmatter" -eq 1 ] && [ "$has_heading" -eq 1 ]
 }
 
+rewrite_links_in_docs() {
+  local old_basename="$1"
+  local new_basename="$2"
+  local expr1="s|](\([^)]*\)${old_basename})|](\1${new_basename})|g"
+  local expr2="s|](\([^)#]*\)${old_basename}#|](\1${new_basename}#|g"
+  # macOS BSD sed requires `sed -i ''`; GNU sed (Linux/CI) uses `sed -i`
+  if [[ "$(uname -s)" == "Darwin" ]]; then
+    find docs/ -name '*.md' -exec sed -i '' -e "$expr1" -e "$expr2" {} +
+  else
+    find docs/ -name '*.md' -exec sed -i -e "$expr1" -e "$expr2" {} +
+  fi
+}
+
 # Allow sourcing for tests
 case "${1:-}" in
   --test)
diff --git a/scripts/test-md-extension-autofix.sh b/scripts/test-md-extension-autofix.sh
index 1999c4118f..29d6bd3eef 100644
--- a/scripts/test-md-extension-autofix.sh
+++ b/scripts/test-md-extension-autofix.sh
@@ -114,6 +114,40 @@ assert_false "not markdown: powershell script" "$R"
 
 rm -rf "$TMPDIR_TEST"
 
+# ---- rewrite_links_in_docs ----
+
+TMPDIR_LINKS=$(mktemp -d)
+mkdir -p "$TMPDIR_LINKS/docs/product/1.0"
+
+# File that links to the old extensionless path
+cat > "$TMPDIR_LINKS/docs/product/1.0/overview.md" <<'EOF'
+---
+title: Overview
+---
+
+# Overview
+
+See [delete matches](delete-sdd-matches) for details.
+Also see [this page](../other/delete-sdd-matches) and [anchored](delete-sdd-matches#section).
+EOF
+
+# Run rewrite from inside the temp dir
+(cd "$TMPDIR_LINKS" && rewrite_links_in_docs "delete-sdd-matches" "delete-sdd-matches.md")
+
+# Check plain link was rewritten
+grep -q '](delete-sdd-matches.md)' "$TMPDIR_LINKS/docs/product/1.0/overview.md" && R=0 || R=1
+assert_true "link rewrite: plain link updated" "$R"
+
+# Check anchored link was rewritten
+grep -q '](delete-sdd-matches.md#section)' "$TMPDIR_LINKS/docs/product/1.0/overview.md" && R=0 || R=1
+assert_true "link rewrite: anchored link updated" "$R"
+
+# Check relative path link was rewritten
+grep -q '](../other/delete-sdd-matches.md)' "$TMPDIR_LINKS/docs/product/1.0/overview.md" && R=0 || R=1
+assert_true "link rewrite: relative path link updated" "$R"
+
+rm -rf "$TMPDIR_LINKS"
+
 echo ""
 echo "Results: $PASS passed, $FAIL failed"
 if [ "$FAIL" -gt 0 ]; then

From f1746182b06962dbf7448bcb304efcbad7af87d1 Mon Sep 17 00:00:00 2001
From: hilram7 <212961752+hilram7@users.noreply.github.com>
Date: Mon, 6 Apr 2026 14:52:01 -0400
Subject: [PATCH 03/17] feat(md-autofix): implement main loop and JSON output

---
 scripts/md-extension-autofix.sh | 68 ++++++++++++++++++++++++++++++++-
 1 file changed, 66 insertions(+), 2 deletions(-)

diff --git a/scripts/md-extension-autofix.sh b/scripts/md-extension-autofix.sh
index 2972b7a094..4cacaddc4b 100644
--- a/scripts/md-extension-autofix.sh
+++ b/scripts/md-extension-autofix.sh
@@ -63,5 +63,69 @@ case "${1:-}" in
     ;;
 esac
 
-echo "Not yet implemented" >&2
-exit 1
+CHANGED_FILES_LIST="${1:?Usage: md-extension-autofix.sh <changed-files-list>}"
+
+if [ ! -f "$CHANGED_FILES_LIST" ]; then
+  echo '{"renamed": [], "skipped": []}'
+  exit 0
+fi
+
+RENAMED_FROM=()
+RENAMED_TO=()
+SKIPPED_FILES=()
+SKIP_REASONS=()
+
+while IFS= read -r file; do
+  # Only process files inside docs/
+  [[ "$file" == docs/* ]] || continue
+
+  # Skip deleted files
+  [ -f "$file" ] || continue
+
+  # Skip files that already have an extension
+  has_extension "$file" && continue
+
+  # Skip files with a known non-markdown extension
+  is_ignored_extension "$file" && continue
+
+  new_file="${file}.md"
+
+  # Skip if destination already exists
+  if [ -f "$new_file" ]; then
+    SKIPPED_FILES+=("$file")
+    SKIP_REASONS+=("$(basename "$new_file") already exists in the same folder")
+    continue
+  fi
+
+  # Skip if content doesn't look like markdown
+  if ! is_markdown_content "$file"; then
+    SKIPPED_FILES+=("$file")
+    SKIP_REASONS+=("Content doesn't look like markdown — please check and rename manually if needed")
+    continue
+  fi
+
+  # Rename and rewrite links
+  git mv "$file" "$new_file"
+  rewrite_links_in_docs "$(basename "$file")" "$(basename "$new_file")"
+
+  RENAMED_FROM+=("$file")
+  RENAMED_TO+=("$new_file")
+
+done < "$CHANGED_FILES_LIST"
+
+# Output JSON summary
+RENAMED_JSON="["
+for i in "${!RENAMED_FROM[@]}"; do
+  [ "$i" -gt 0 ] && RENAMED_JSON+=","
+  RENAMED_JSON+="{\"from\": \"${RENAMED_FROM[$i]}\", \"to\": \"${RENAMED_TO[$i]}\"}"
+done
+RENAMED_JSON+="]"
+
+SKIPPED_JSON="["
+for i in "${!SKIPPED_FILES[@]}"; do
+  [ "$i" -gt 0 ] && SKIPPED_JSON+=","
+  SKIPPED_JSON+="{\"file\": \"${SKIPPED_FILES[$i]}\", \"reason\": \"${SKIP_REASONS[$i]}\"}"
+done
+SKIPPED_JSON+="]"
+
+echo "{\"renamed\": ${RENAMED_JSON}, \"skipped\": ${SKIPPED_JSON}}"

From b5f218f646aa860454631a5ac5687179ecf64e4c Mon Sep 17 00:00:00 2001
From: hilram7 <212961752+hilram7@users.noreply.github.com>
Date: Mon, 6 Apr 2026 14:52:52 -0400
Subject: [PATCH 04/17] feat(md-autofix): add workflow to auto-fix missing .md
 extensions on PRs

---
 .github/workflows/md-extension-autofix.yml | 156 +++++++++++++++++++++
 1 file changed, 156 insertions(+)
 create mode 100644 .github/workflows/md-extension-autofix.yml

diff --git a/.github/workflows/md-extension-autofix.yml b/.github/workflows/md-extension-autofix.yml
new file mode 100644
index 0000000000..7f36183e97
--- /dev/null
+++ b/.github/workflows/md-extension-autofix.yml
@@ -0,0 +1,156 @@
+name: MD Extension Auto-Fix
+
+on:
+  pull_request:
+    types: [opened, synchronize]
+    branches:
+      - dev
+
+concurrency:
+  group: md-extension-autofix-${{ github.event.pull_request.number }}
+
+jobs:
+  md-extension-autofix:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    steps:
+      - name: Check if triggered by bot commit
+        id: bot-check
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          COMMIT=$(gh api repos/${{ github.repository }}/commits/${{ github.event.pull_request.head.sha }} \
+            --jq '{message: .commit.message}')
+          MESSAGE=$(echo "$COMMIT" | jq -r '.message')
+          echo "Latest commit message: $MESSAGE"
+          if echo "$MESSAGE" | grep -qE '^fix\(docs\): add missing \.md extension'; then
+            echo "Skipping: commit is from md-extension-autofix workflow"
+            echo "skip=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "skip=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Checkout PR branch
+        if: steps.bot-check.outputs.skip != 'true'
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}
+          token: ${{ secrets.VALE_TOKEN }}
+          fetch-depth: 0
+
+      - name: Configure git identity
+        if: steps.bot-check.outputs.skip != 'true'
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Get changed files in docs/
+        id: changed-files
+        if: steps.bot-check.outputs.skip != 'true'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          PR_NUMBER=${{ github.event.pull_request.number }}
+          CHANGED=$(gh pr diff "$PR_NUMBER" --name-only | grep -E '^docs/' || true)
+          if [ -z "$CHANGED" ]; then
+            echo "No docs/ files changed"
+            echo "count=0" >> "$GITHUB_OUTPUT"
+          else
+            echo "$CHANGED" > /tmp/changed-files.txt
+            echo "count=$(echo "$CHANGED" | wc -l | tr -d ' ')" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Run md-extension-autofix
+        id: autofix
+        if: steps.changed-files.outputs.count > 0
+        run: |
+          chmod +x scripts/md-extension-autofix.sh
+          SUMMARY=$(./scripts/md-extension-autofix.sh /tmp/changed-files.txt)
+          echo "$SUMMARY" > /tmp/md-extension-summary.json
+          RENAMED_COUNT=$(echo "$SUMMARY" | jq '.renamed | length')
+          SKIPPED_COUNT=$(echo "$SUMMARY" | jq '.skipped | length')
+          echo "renamed=$RENAMED_COUNT" >> "$GITHUB_OUTPUT"
+          echo "skipped=$SKIPPED_COUNT" >> "$GITHUB_OUTPUT"
+          echo "Renamed: $RENAMED_COUNT, Skipped: $SKIPPED_COUNT"
+
+      - name: Commit renamed files
+        id: commit
+        if: steps.autofix.outputs.renamed > 0
+        run: |
+          if git diff --quiet && git diff --staged --quiet; then
+            echo "committed=false" >> "$GITHUB_OUTPUT"
+          else
+            git add -A docs/
+            git commit -m "fix(docs): add missing .md extension to renamed files"
+            echo "committed=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Push fixes
+        if: steps.commit.outputs.committed == 'true'
+        continue-on-error: true
+        env:
+          VALE_TOKEN: ${{ secrets.VALE_TOKEN }}
+        run: |
+          git remote set-url origin "https://x-access-token:${VALE_TOKEN}@github.com/${{ github.repository }}.git"
+          git push
+
+      - name: Post PR comment
+        if: steps.changed-files.outputs.count > 0
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          PR_NUMBER=${{ github.event.pull_request.number }}
+          REPO=${{ github.repository }}
+
+          RENAMED_COUNT=0
+          SKIPPED_COUNT=0
+          if [ -f /tmp/md-extension-summary.json ]; then
+            RENAMED_COUNT=$(jq '.renamed | length' /tmp/md-extension-summary.json)
+            SKIPPED_COUNT=$(jq '.skipped | length' /tmp/md-extension-summary.json)
+          fi
+
+          # Nothing to report — exit silently
+          if [ "$RENAMED_COUNT" -eq 0 ] && [ "$SKIPPED_COUNT" -eq 0 ]; then
+            exit 0
+          fi
+
+          {
+            if [ "$RENAMED_COUNT" -gt 0 ]; then
+              echo "**Auto-fix: Missing \`.md\` extensions added**"
+              echo ""
+              echo "The following files were missing a \`.md\` extension and would not have appeared on the docs site. They've been renamed automatically:"
+              echo ""
+              echo "| Original filename | Renamed to |"
+              echo "|---|---|"
+              jq -r '.renamed[] | "| `\(.from)` | `\(.to | split("/") | last)` |"' /tmp/md-extension-summary.json
+              echo ""
+              echo "Links to these files in other pages have been updated. Please review the changes in the commit above."
+            fi
+
+            if [ "$SKIPPED_COUNT" -gt 0 ]; then
+              if [ "$RENAMED_COUNT" -gt 0 ]; then echo ""; fi
+              echo "**Action needed: Possible missing \`.md\` extension**"
+              echo ""
+              echo "The following files were added to a docs directory without a \`.md\` extension, but couldn't be auto-renamed:"
+              echo ""
+              echo "| File | Reason |"
+              echo "|---|---|"
+              jq -r '.skipped[] | "| `\(.file)` | \(.reason) |"' /tmp/md-extension-summary.json
+              echo ""
+              echo "If these are markdown pages, add the \`.md\` extension and push again."
+            fi
+          } > /tmp/md-extension-comment.md
+
+          # Delete previous comments from this workflow
+          COMMENT_IDS=$(gh api "repos/${REPO}/issues/${PR_NUMBER}/comments" \
+            --jq '[.[] | select(
+              .user.login == "github-actions[bot]" and
+              (.body | (contains("Auto-fix: Missing `.md` extensions") or contains("Action needed: Possible missing `.md` extension")))
+            ) | .id] | .[]' 2>/dev/null || true)
+          for ID in $COMMENT_IDS; do
+            gh api "repos/${REPO}/issues/comments/${ID}" -X DELETE 2>/dev/null || true
+          done
+
+          gh pr comment "$PR_NUMBER" --repo "$REPO" --body-file /tmp/md-extension-comment.md

From 14eaf0eca1f1ad1585ab677a88e9ac230b848a14 Mon Sep 17 00:00:00 2001
From: hilram7 <212961752+hilram7@users.noreply.github.com>
Date: Mon, 6 Apr 2026 16:06:05 -0400
Subject: [PATCH 05/17] fix(docs): add .md extension and frontmatter to
 fs_sdd_delete (accessanalyzer 11.6, 12.0); fix KB links

---
 .../jobs/instantjobs/{fs_sdd_delete => fs_sdd_delete.md}  | 7 ++++++-
 .../12.0/admin/jobs/instantjobs/fs_sdd_delete.md          | 7 ++++++-
 .../delete-sdd-matches.md                                 | 8 +++++---
 3 files changed, 17 insertions(+), 5 deletions(-)
 rename docs/accessanalyzer/11.6/admin/jobs/instantjobs/{fs_sdd_delete => fs_sdd_delete.md} (97%)

diff --git a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
similarity index 97%
rename from docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete
rename to docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
index e7acec3d49..00f83fc894 100644
--- a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete
+++ b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -1,5 +1,10 @@
+---
+title: "FS_SDD_DELETE Job"
+description: "FS_SDD_DELETE Job"
+sidebar_position: 45
+---
 
-# FS_SDD_DELETE Instant Job
+# FS_SDD_DELETE Job
 
 The FS_SDD_DELETE instant job deletes Sensitive Data Discovery (SDD) data from the Tier 1 database for specified criteria, hosts, or combinations thereof. This job is available in the Instant Job Library under the File System library.
 
diff --git a/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
index 6e0a7de4f4..5767d50102 100644
--- a/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -1,5 +1,10 @@
+---
+title: "FS_SDD_DELETE Job"
+description: "FS_SDD_DELETE Job"
+sidebar_position: 45
+---
 
-# FS_SDD_DELETE Instant Job
+# FS_SDD_DELETE Job
 
 The FS_SDD_DELETE instant job deletes Sensitive Data Discovery (SDD) data from the Tier 1 database for specified criteria, hosts, or combinations thereof. This job is available in the Instant Job Library under the File System library.
 
diff --git a/docs/kb/accessanalyzer/file-system-and-sensitive-data-discovery/delete-sdd-matches.md b/docs/kb/accessanalyzer/file-system-and-sensitive-data-discovery/delete-sdd-matches.md
index 806ab1ba79..4c2b6e2944 100644
--- a/docs/kb/accessanalyzer/file-system-and-sensitive-data-discovery/delete-sdd-matches.md
+++ b/docs/kb/accessanalyzer/file-system-and-sensitive-data-discovery/delete-sdd-matches.md
@@ -50,8 +50,10 @@ SET MatchData = NULL,
 ### Removing All SDD Matches
 
 Use the `FS_SDD_DELETE` instant job to remove SDD matches entirely:
-- **NAA v12.0:** [InstantJobs\FS_SDD_DELETE](https://docs.netwrix.com/docs/accessanalyzer/12_0/admin/jobs/instantjobs/fs_sdd_delete)
-- **NAA v11.6:** [InstantJobs\FS_SDD_DELETE](https://docs.netwrix.com/docs/accessanalyzer/11_6/admin/jobs/instantjobs/fs_sdd_delete)
+- **Access Analyzer 12.0:** [FS_SDD_DELETE Job](https://docs.netwrix.com/docs/accessanalyzer/12_0/admin/jobs/instantjobs/fs_sdd_delete)
+- **Access Analyzer 11.6:** [FS_SDD_DELETE Job](https://docs.netwrix.com/docs/accessanalyzer/11_6/admin/jobs/instantjobs/fs_sdd_delete)
 
-## Related Link
+## Related Links
 - [Configure the (SEEK) File System Scan Query](https://docs.netwrix.com/docs/accessanalyzer/12_0/solutions/filesystem/collection/seek_system_scans#configure-the-seek-file-system-scan-query)
+- [FS_SDD_DELETE Job — Access Analyzer 12.0](https://docs.netwrix.com/docs/accessanalyzer/12_0/admin/jobs/instantjobs/fs_sdd_delete)
+- [FS_SDD_DELETE Job — Access Analyzer 11.6](https://docs.netwrix.com/docs/accessanalyzer/11_6/admin/jobs/instantjobs/fs_sdd_delete)

From b5ba6e1e7eda56d8769ddf9db3ea9c548f44e58b Mon Sep 17 00:00:00 2001
From: hilram7 <212961752+hilram7@users.noreply.github.com>
Date: Mon, 6 Apr 2026 16:21:50 -0400
Subject: [PATCH 06/17] fix(md-autofix): use mv + git add instead of git mv to
 support untracked files

---
 docs/kb/accessanalyzer/test-autofix/test-article.md | 9 +++++++++
 scripts/md-extension-autofix.sh                     | 5 ++++-
 2 files changed, 13 insertions(+), 1 deletion(-)
 create mode 100644 docs/kb/accessanalyzer/test-autofix/test-article.md

diff --git a/docs/kb/accessanalyzer/test-autofix/test-article.md b/docs/kb/accessanalyzer/test-autofix/test-article.md
new file mode 100644
index 0000000000..81372d5888
--- /dev/null
+++ b/docs/kb/accessanalyzer/test-autofix/test-article.md
@@ -0,0 +1,9 @@
+---
+title: "Test Article"
+description: "Test Article"
+sidebar_position: 10
+---
+
+# Test Article
+
+This is a test article to verify the md-extension-autofix script.
diff --git a/scripts/md-extension-autofix.sh b/scripts/md-extension-autofix.sh
index 4cacaddc4b..faa6bd1b89 100644
--- a/scripts/md-extension-autofix.sh
+++ b/scripts/md-extension-autofix.sh
@@ -105,7 +105,10 @@ while IFS= read -r file; do
   fi
 
   # Rename and rewrite links
-  git mv "$file" "$new_file"
+  # Use mv + git add instead of git mv so it works for both tracked and untracked files
+  mv "$file" "$new_file"
+  git add "$new_file"
+  git rm --cached "$file" 2>/dev/null || true
   rewrite_links_in_docs "$(basename "$file")" "$(basename "$new_file")"
 
   RENAMED_FROM+=("$file")

From 7223cf58766f9c1b665bb6eb6efb462bbe2f2930 Mon Sep 17 00:00:00 2001
From: hilram7 <212961752+hilram7@users.noreply.github.com>
Date: Mon, 6 Apr 2026 16:22:35 -0400
Subject: [PATCH 07/17] chore: remove test files from md-autofix local testing

---
 docs/kb/accessanalyzer/test-autofix/test-article.md | 9 ---------
 1 file changed, 9 deletions(-)
 delete mode 100644 docs/kb/accessanalyzer/test-autofix/test-article.md

diff --git a/docs/kb/accessanalyzer/test-autofix/test-article.md b/docs/kb/accessanalyzer/test-autofix/test-article.md
deleted file mode 100644
index 81372d5888..0000000000
--- a/docs/kb/accessanalyzer/test-autofix/test-article.md
+++ /dev/null
@@ -1,9 +0,0 @@
----
-title: "Test Article"
-description: "Test Article"
-sidebar_position: 10
----
-
-# Test Article
-
-This is a test article to verify the md-extension-autofix script.

From c16e85dc933edcbdaf5ce24debe4b128b965abf8 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Mon, 6 Apr 2026 20:29:20 +0000
Subject: [PATCH 08/17] fix(vale): auto-fix substitutions and removals

---
 .../11.6/admin/jobs/instantjobs/fs_sdd_delete.md              | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
index 00f83fc894..afaf7bb95c 100644
--- a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -25,7 +25,7 @@ The FS_SDD_DELETE instant job provides a controlled method for removing Sensitiv
 
 To see the analysis tasks for this job, navigate to **Jobs > Instant Job Library > File System > FS_SDD_DELETE** and select the **Analysis Tasks** tab.
 
-> **WARNING**: This job permanently deletes data from the database. This action cannot be undone. All analysis tasks are disabled by default to prevent accidental data loss. Carefully review the data to be deleted before enabling and running any analysis task.
+> **WARNING**: This job permanently deletes data from the database. This action can't be undone. All analysis tasks are disabled by default to prevent accidental data loss. Carefully review the data to be deleted before enabling and running any analysis task.
 
 The following analysis tasks are available for the FS_SDD_DELETE job:
 
@@ -39,7 +39,7 @@ Each analysis task requires manually populating temporary database tables before
 
 1. Open SQL Server Management Studio and connect to your Tier 1 database.
 2. Determine which analysis task you need to run based on the data you want to delete.
-3. Populate the required temporary table(s):
+3. Populate the required temporary tables:
    - For **Delete Criteria**: Populate the `#Criteria` temporary table with the criteria names you want to delete
    - For **Delete Host**: Populate the `#hosts` temporary table with the host names you want to delete
    - For **Remove Host & Criteria**: Populate both the `#hosts` and `#Criteria` temporary tables with the specific host and criteria combinations

From 673f19c67f8e751506760b95ff755073e94e0957 Mon Sep 17 00:00:00 2001
From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com>
Date: Mon, 6 Apr 2026 20:30:17 +0000
Subject: [PATCH 09/17] fix(vale): auto-fix rewrites (AI-assisted)

---
 .../accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
index afaf7bb95c..d04213d492 100644
--- a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -35,7 +35,7 @@ The following analysis tasks are available for the FS_SDD_DELETE job:
 
 ### Configuring the Analysis Tasks
 
-Each analysis task requires manually populating temporary database tables before execution. Follow these steps to configure and run an analysis task:
+Each analysis task requires manually populating temporary database tables before execution:
 
 1. Open SQL Server Management Studio and connect to your Tier 1 database.
 2. Determine which analysis task you need to run based on the data you want to delete.

From ad5acb6074c59213f6cca21d836350f7a8f7936a Mon Sep 17 00:00:00 2001
From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com>
Date: Mon, 6 Apr 2026 20:31:57 +0000
Subject: [PATCH 10/17] fix(dale): auto-fix documentation issues (AI-assisted)

---
 .../11.6/admin/jobs/instantjobs/fs_sdd_delete.md              | 4 ++--
 .../12.0/admin/jobs/instantjobs/fs_sdd_delete.md              | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
index d04213d492..96899446e8 100644
--- a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -25,7 +25,7 @@ The FS_SDD_DELETE instant job provides a controlled method for removing Sensitiv
 
 To see the analysis tasks for this job, navigate to **Jobs > Instant Job Library > File System > FS_SDD_DELETE** and select the **Analysis Tasks** tab.
 
-> **WARNING**: This job permanently deletes data from the database. This action can't be undone. All analysis tasks are disabled by default to prevent accidental data loss. Carefully review the data to be deleted before enabling and running any analysis task.
+> **WARNING**: This job permanently deletes data from the database. You can't undo this action. All analysis tasks are disabled by default to prevent accidental data loss. Carefully review the data to be deleted before enabling and running any analysis task.
 
 The following analysis tasks are available for the FS_SDD_DELETE job:
 
@@ -48,5 +48,5 @@ Each analysis task requires manually populating temporary database tables before
 6. Right-click the appropriate analysis task and select **Enable**.
 7. Review the enabled task to verify it will delete the correct data.
 8. Run the job by clicking **Run Job** and selecting **Local** as the target host.
-9. After the job completes, verify the data has been deleted as expected.
+9. After the job completes, verify the job deleted the data as expected.
 10. Disable the analysis task to prevent accidental future deletions.
diff --git a/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
index 5767d50102..d7d6b58ba8 100644
--- a/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -25,7 +25,7 @@ The FS_SDD_DELETE instant job provides a controlled method for removing Sensitiv
 
 To see the analysis tasks for this job, navigate to **Jobs > Instant Job Library > File System > FS_SDD_DELETE** and select the **Analysis Tasks** tab.
 
-> **WARNING**: This job permanently deletes data from the database. This action can't be undone. All analysis tasks are disabled by default to prevent accidental data loss. Carefully review the data to be deleted before enabling and running any analysis task.
+> **WARNING**: This job permanently deletes data from the database. You can't undo this action. All analysis tasks are disabled by default to prevent accidental data loss. Carefully review the data to be deleted before enabling and running any analysis task.
 
 The following analysis tasks are available for the FS_SDD_DELETE job:
 
@@ -48,5 +48,5 @@ Each analysis task requires manually populating temporary database tables before
 6. Right-click the appropriate analysis task and select **Enable**.
 7. Review the enabled task to verify it will delete the correct data.
 8. Run the job by clicking **Run Job** and selecting **Local** as the target host.
-9. After the job completes, verify the data has been deleted as expected.
+9. After the job completes, verify the job deleted the data as expected.
 10. Disable the analysis task to prevent accidental future deletions.

From 27bb241c47380253e511c1190107ad847b782732 Mon Sep 17 00:00:00 2001
From: Hil-Ram-NWX <212961752+hilram7@users.noreply.github.com>
Date: Mon, 6 Apr 2026 16:55:18 -0400
Subject: [PATCH 11/17] Potential fix for pull request finding 'CodeQL /
 Checkout of untrusted code in trusted context'

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 .github/workflows/md-extension-autofix.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/md-extension-autofix.yml b/.github/workflows/md-extension-autofix.yml
index 7f36183e97..340f811ecd 100644
--- a/.github/workflows/md-extension-autofix.yml
+++ b/.github/workflows/md-extension-autofix.yml
@@ -37,9 +37,9 @@ jobs:
         uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.ref }}
-          token: ${{ secrets.VALE_TOKEN }}
           fetch-depth: 0
 
+
       - name: Configure git identity
         if: steps.bot-check.outputs.skip != 'true'
         run: |

From 3e861f3aff4426ee227ba2996cd8660df5926e6a Mon Sep 17 00:00:00 2001
From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com>
Date: Mon, 6 Apr 2026 20:57:25 +0000
Subject: [PATCH 12/17] fix(dale): auto-fix documentation issues (AI-assisted)

---
 .../11.6/admin/jobs/instantjobs/fs_sdd_delete.md          | 8 ++++----
 .../12.0/admin/jobs/instantjobs/fs_sdd_delete.md          | 8 ++++----
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
index 96899446e8..de66fb88c9 100644
--- a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -12,20 +12,20 @@ The FS_SDD_DELETE instant job deletes Sensitive Data Discovery (SDD) data from t
 
 ## Runtime Details
 
-- **Dependencies**: The 0.Collection Job Group must be successfully run before running this job
+- **Dependencies**: Run the 0.Collection Job Group successfully before running this job
 - **Target Hosts**: None (select Local host)
 - **Scheduling**: Can be run as desired, typically on an ad-hoc basis
 - **History Retention**: Not supported and must be turned off
 - **Multi-console Support**: Not supported
-- **Additional Notes**: This job performs permanent data deletion with no undo capability. All analysis tasks are disabled by default to prevent accidental data loss.
+- **Additional Notes**: This job performs permanent data deletion with no undo capability. Access Analyzer disables all analysis tasks by default to prevent accidental data loss.
 
-The FS_SDD_DELETE instant job provides a controlled method for removing Sensitive Data Discovery data from your Tier 1 database. Use this job to clean up SDD data for specific criteria, remove data associated with decommissioned hosts, or delete specific host-and-criteria combinations. Because this job permanently deletes data with no recovery option, all analysis tasks are disabled by default as a safety measure.
+The FS_SDD_DELETE instant job provides a controlled method for removing Sensitive Data Discovery data from your Tier 1 database. Use this job to clean up SDD data for specific criteria, remove data associated with decommissioned hosts, or delete specific host-and-criteria combinations. Because this job permanently deletes data with no recovery option, Access Analyzer disables all analysis tasks by default as a safety measure.
 
 ## Analysis Tasks for the FS_SDD_DELETE Job
 
 To see the analysis tasks for this job, navigate to **Jobs > Instant Job Library > File System > FS_SDD_DELETE** and select the **Analysis Tasks** tab.
 
-> **WARNING**: This job permanently deletes data from the database. You can't undo this action. All analysis tasks are disabled by default to prevent accidental data loss. Carefully review the data to be deleted before enabling and running any analysis task.
+> **WARNING**: This job permanently deletes data from the database. You can't undo this action. Access Analyzer disables all analysis tasks by default to prevent accidental data loss. Carefully review the data to be deleted before enabling and running any analysis task.
 
 The following analysis tasks are available for the FS_SDD_DELETE job:
 
diff --git a/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
index d7d6b58ba8..5c3a19e9ce 100644
--- a/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -12,20 +12,20 @@ The FS_SDD_DELETE instant job deletes Sensitive Data Discovery (SDD) data from t
 
 ## Runtime Details
 
-- **Dependencies**: The 0.Collection Job Group must be successfully run before running this job
+- **Dependencies**: Run the 0.Collection Job Group successfully before running this job
 - **Target Hosts**: None (select Local host)
 - **Scheduling**: Can be run as desired, typically on an ad-hoc basis
 - **History Retention**: Not supported and must be turned off
 - **Multi-console Support**: Not supported
-- **Additional Notes**: This job performs permanent data deletion with no undo capability. All analysis tasks are disabled by default to prevent accidental data loss.
+- **Additional Notes**: This job performs permanent data deletion with no undo capability. Access Analyzer disables all analysis tasks by default to prevent accidental data loss.
 
-The FS_SDD_DELETE instant job provides a controlled method for removing Sensitive Data Discovery data from your Tier 1 database. Use this job to clean up SDD data for specific criteria, remove data associated with decommissioned hosts, or delete specific host-and-criteria combinations. Because this job permanently deletes data with no recovery option, all analysis tasks are disabled by default as a safety measure.
+The FS_SDD_DELETE instant job provides a controlled method for removing Sensitive Data Discovery data from your Tier 1 database. Use this job to clean up SDD data for specific criteria, remove data associated with decommissioned hosts, or delete specific host-and-criteria combinations. Because this job permanently deletes data with no recovery option, Access Analyzer disables all analysis tasks by default as a safety measure.
 
 ## Analysis Tasks for the FS_SDD_DELETE Job
 
 To see the analysis tasks for this job, navigate to **Jobs > Instant Job Library > File System > FS_SDD_DELETE** and select the **Analysis Tasks** tab.
 
-> **WARNING**: This job permanently deletes data from the database. You can't undo this action. All analysis tasks are disabled by default to prevent accidental data loss. Carefully review the data to be deleted before enabling and running any analysis task.
+> **WARNING**: This job permanently deletes data from the database. You can't undo this action. Access Analyzer disables all analysis tasks by default to prevent accidental data loss. Carefully review the data to be deleted before enabling and running any analysis task.
 
 The following analysis tasks are available for the FS_SDD_DELETE job:
 

From 34940079e3f9912922ca18d0e9885bee82e36d44 Mon Sep 17 00:00:00 2001
From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:10:31 +0000
Subject: [PATCH 13/17] docs: convert blockquote warnings to :::warning
 admonitions

Convert raw Markdown blockquote WARNING to Docusaurus :::warning
admonition blocks in fs_sdd_delete.md for both 11.6 and 12.0.

Co-Authored-By: Claude <noreply@anthropic.com>
---
 .../11.6/admin/jobs/instantjobs/fs_sdd_delete.md              | 4 +++-
 .../12.0/admin/jobs/instantjobs/fs_sdd_delete.md              | 4 +++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
index de66fb88c9..edda241d70 100644
--- a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -25,7 +25,9 @@ The FS_SDD_DELETE instant job provides a controlled method for removing Sensitiv
 
 To see the analysis tasks for this job, navigate to **Jobs > Instant Job Library > File System > FS_SDD_DELETE** and select the **Analysis Tasks** tab.
 
-> **WARNING**: This job permanently deletes data from the database. You can't undo this action. Access Analyzer disables all analysis tasks by default to prevent accidental data loss. Carefully review the data to be deleted before enabling and running any analysis task.
+:::warning
+This job permanently deletes data from the database. You can't undo this action. Access Analyzer disables all analysis tasks by default to prevent accidental data loss. Carefully review the data to be deleted before enabling and running any analysis task.
+:::
 
 The following analysis tasks are available for the FS_SDD_DELETE job:
 
diff --git a/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
index 5c3a19e9ce..57a9cc60e8 100644
--- a/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -25,7 +25,9 @@ The FS_SDD_DELETE instant job provides a controlled method for removing Sensitiv
 
 To see the analysis tasks for this job, navigate to **Jobs > Instant Job Library > File System > FS_SDD_DELETE** and select the **Analysis Tasks** tab.
 
-> **WARNING**: This job permanently deletes data from the database. You can't undo this action. Access Analyzer disables all analysis tasks by default to prevent accidental data loss. Carefully review the data to be deleted before enabling and running any analysis task.
+:::warning
+This job permanently deletes data from the database. You can't undo this action. Access Analyzer disables all analysis tasks by default to prevent accidental data loss. Carefully review the data to be deleted before enabling and running any analysis task.
+:::
 
 The following analysis tasks are available for the FS_SDD_DELETE job:
 

From 648fc0631708f69910edcb0b46e25eb1dac7da96 Mon Sep 17 00:00:00 2001
From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:12:19 +0000
Subject: [PATCH 14/17] fix(dale): auto-fix documentation issues (AI-assisted)

---
 .../11.6/admin/jobs/instantjobs/fs_sdd_delete.md              | 4 ++--
 .../12.0/admin/jobs/instantjobs/fs_sdd_delete.md              | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
index edda241d70..8fb8ea1e74 100644
--- a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -14,8 +14,8 @@ The FS_SDD_DELETE instant job deletes Sensitive Data Discovery (SDD) data from t
 
 - **Dependencies**: Run the 0.Collection Job Group successfully before running this job
 - **Target Hosts**: None (select Local host)
-- **Scheduling**: Can be run as desired, typically on an ad-hoc basis
-- **History Retention**: Not supported and must be turned off
+- **Scheduling**: Run as needed, typically on an ad-hoc basis
+- **History Retention**: Not supported. Turn off history retention before running this job.
 - **Multi-console Support**: Not supported
 - **Additional Notes**: This job performs permanent data deletion with no undo capability. Access Analyzer disables all analysis tasks by default to prevent accidental data loss.
 
diff --git a/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
index 57a9cc60e8..38032ffa4f 100644
--- a/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -14,8 +14,8 @@ The FS_SDD_DELETE instant job deletes Sensitive Data Discovery (SDD) data from t
 
 - **Dependencies**: Run the 0.Collection Job Group successfully before running this job
 - **Target Hosts**: None (select Local host)
-- **Scheduling**: Can be run as desired, typically on an ad-hoc basis
-- **History Retention**: Not supported and must be turned off
+- **Scheduling**: Run as needed, typically on an ad-hoc basis
+- **History Retention**: Not supported. Turn off history retention before running this job.
 - **Multi-console Support**: Not supported
 - **Additional Notes**: This job performs permanent data deletion with no undo capability. Access Analyzer disables all analysis tasks by default to prevent accidental data loss.
 

From 50af4684172a22a73e90f713c24246acb34adfd9 Mon Sep 17 00:00:00 2001
From: hilram7 <212961752+hilram7@users.noreply.github.com>
Date: Mon, 6 Apr 2026 17:34:48 -0400
Subject: [PATCH 15/17] fix(workflow): checkout base branch to prevent
 untrusted code execution

Tested locally: 17 unit tests passed, live script test confirmed rename and git staging of extensionless file, test article verified in dev server sidebar.
---
 .github/workflows/md-extension-autofix.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/md-extension-autofix.yml b/.github/workflows/md-extension-autofix.yml
index 340f811ecd..269c5aec91 100644
--- a/.github/workflows/md-extension-autofix.yml
+++ b/.github/workflows/md-extension-autofix.yml
@@ -36,7 +36,7 @@ jobs:
         if: steps.bot-check.outputs.skip != 'true'
         uses: actions/checkout@v4
         with:
-          ref: ${{ github.event.pull_request.head.ref }}
+          ref: ${{ github.event.pull_request.base.ref }}
           fetch-depth: 0
 
 

From c9ca57e02f38ca2681015105f5a7965ac5307e66 Mon Sep 17 00:00:00 2001
From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:37:21 +0000
Subject: [PATCH 16/17] fix(dale): auto-fix documentation issues (AI-assisted)

---
 .../11.6/admin/jobs/instantjobs/fs_sdd_delete.md              | 4 ++--
 .../12.0/admin/jobs/instantjobs/fs_sdd_delete.md              | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
index 8fb8ea1e74..7b136845f9 100644
--- a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -19,7 +19,7 @@ The FS_SDD_DELETE instant job deletes Sensitive Data Discovery (SDD) data from t
 - **Multi-console Support**: Not supported
 - **Additional Notes**: This job performs permanent data deletion with no undo capability. Access Analyzer disables all analysis tasks by default to prevent accidental data loss.
 
-The FS_SDD_DELETE instant job provides a controlled method for removing Sensitive Data Discovery data from your Tier 1 database. Use this job to clean up SDD data for specific criteria, remove data associated with decommissioned hosts, or delete specific host-and-criteria combinations. Because this job permanently deletes data with no recovery option, Access Analyzer disables all analysis tasks by default as a safety measure.
+The FS_SDD_DELETE instant job provides a controlled method for removing Sensitive Data Discovery data from your Tier 1 database. Use this job to delete SDD data for specific criteria, remove data associated with decommissioned hosts, or delete specific host-and-criteria combinations. Because this job permanently deletes data with no recovery option, Access Analyzer disables all analysis tasks by default as a safety measure.
 
 ## Analysis Tasks for the FS_SDD_DELETE Job
 
@@ -33,7 +33,7 @@ The following analysis tasks are available for the FS_SDD_DELETE job:
 
 - **Delete Criteria** – Deletes all SDD data for specified criteria from all hosts. Use this task when you want to remove all occurrences of specific criteria across your entire environment.
 - **Delete Host** – Deletes all SDD data related to a specific host. Use this task when decommissioning a host or removing all SDD data associated with a particular system.
-- **Remove Host & Criteria** – Deletes all SDD data for a specific host and criteria combination. Use this task for targeted removal of SDD data for a specific criterion on a specific host.
+- **Remove Host & Criteria** – Deletes all SDD data for a specific host and criteria combination. Use this task to remove SDD data for a specific criterion on a specific host.
 
 ### Configuring the Analysis Tasks
 
diff --git a/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
index 38032ffa4f..0132f112dc 100644
--- a/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -19,7 +19,7 @@ The FS_SDD_DELETE instant job deletes Sensitive Data Discovery (SDD) data from t
 - **Multi-console Support**: Not supported
 - **Additional Notes**: This job performs permanent data deletion with no undo capability. Access Analyzer disables all analysis tasks by default to prevent accidental data loss.
 
-The FS_SDD_DELETE instant job provides a controlled method for removing Sensitive Data Discovery data from your Tier 1 database. Use this job to clean up SDD data for specific criteria, remove data associated with decommissioned hosts, or delete specific host-and-criteria combinations. Because this job permanently deletes data with no recovery option, Access Analyzer disables all analysis tasks by default as a safety measure.
+The FS_SDD_DELETE instant job provides a controlled method for removing Sensitive Data Discovery data from your Tier 1 database. Use this job to delete SDD data for specific criteria, remove data associated with decommissioned hosts, or delete specific host-and-criteria combinations. Because this job permanently deletes data with no recovery option, Access Analyzer disables all analysis tasks by default as a safety measure.
 
 ## Analysis Tasks for the FS_SDD_DELETE Job
 
@@ -33,7 +33,7 @@ The following analysis tasks are available for the FS_SDD_DELETE job:
 
 - **Delete Criteria** – Deletes all SDD data for specified criteria from all hosts. Use this task when you want to remove all occurrences of specific criteria across your entire environment.
 - **Delete Host** – Deletes all SDD data related to a specific host. Use this task when decommissioning a host or removing all SDD data associated with a particular system.
-- **Remove Host & Criteria** – Deletes all SDD data for a specific host and criteria combination. Use this task for targeted removal of SDD data for a specific criterion on a specific host.
+- **Remove Host & Criteria** – Deletes all SDD data for a specific host and criteria combination. Use this task to remove SDD data for a specific criterion on a specific host.
 
 ### Configuring the Analysis Tasks
 

From e13dc9e7ef8c854b72b0c17f43ac6fed02e67a46 Mon Sep 17 00:00:00 2001
From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com>
Date: Tue, 7 Apr 2026 20:22:56 +0000
Subject: [PATCH 17/17] fix(dale): auto-fix documentation issues (AI-assisted)

---
 .../accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md | 2 +-
 .../accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
index 7b136845f9..1169360a09 100644
--- a/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/11.6/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -31,7 +31,7 @@ This job permanently deletes data from the database. You can't undo this action.
 
 The following analysis tasks are available for the FS_SDD_DELETE job:
 
-- **Delete Criteria** – Deletes all SDD data for specified criteria from all hosts. Use this task when you want to remove all occurrences of specific criteria across your entire environment.
+- **Delete Criteria** – Deletes all SDD data for specified criteria from all hosts. Use this task to remove all occurrences of specific criteria across your entire environment.
 - **Delete Host** – Deletes all SDD data related to a specific host. Use this task when decommissioning a host or removing all SDD data associated with a particular system.
 - **Remove Host & Criteria** – Deletes all SDD data for a specific host and criteria combination. Use this task to remove SDD data for a specific criterion on a specific host.
 
diff --git a/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md b/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
index 0132f112dc..1788f04a9d 100644
--- a/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
+++ b/docs/accessanalyzer/12.0/admin/jobs/instantjobs/fs_sdd_delete.md
@@ -31,7 +31,7 @@ This job permanently deletes data from the database. You can't undo this action.
 
 The following analysis tasks are available for the FS_SDD_DELETE job:
 
-- **Delete Criteria** – Deletes all SDD data for specified criteria from all hosts. Use this task when you want to remove all occurrences of specific criteria across your entire environment.
+- **Delete Criteria** – Deletes all SDD data for specified criteria from all hosts. Use this task to remove all occurrences of specific criteria across your entire environment.
 - **Delete Host** – Deletes all SDD data related to a specific host. Use this task when decommissioning a host or removing all SDD data associated with a particular system.
 - **Remove Host & Criteria** – Deletes all SDD data for a specific host and criteria combination. Use this task to remove SDD data for a specific criterion on a specific host.