Fixed an issue with the list_fsxn_* script, and added a PowerShell version of the warm_performnace_tier script.

[kcantrel]

No description provided.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/actions/checkout	34e114876b0b11c390a56381ad16ebd13914f8d5	🟢 6.3	Details Check Score Reason Maintained 🟢 4 5 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4 Code-Review 🟢 10 all changesets reviewed Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Pinned-Dependencies 🟢 3 dependency not pinned by hash detected -- score normalized to 3 Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 9 security policy file detected Packaging ⚠️ -1 packaging workflow not detected SAST 🟢 10 SAST tool is run on all commits Branch-Protection 🟢 6 branch protection is not maximal on development and all release branches
actions/step-security/git-auto-commit-action	905c3cd6e9ed2b67b4d46ff401fdb6d745d0ff9d	🟢 8.1	Details Check Score Reason Dependency-Update-Tool 🟢 10 update tool detected Maintained 🟢 10 16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Security-Policy 🟢 10 security policy file detected Code-Review 🟢 10 all changesets reviewed Binary-Artifacts 🟢 10 no binaries found in the repo Packaging ⚠️ -1 packaging workflow not detected Pinned-Dependencies 🟢 6 dependency not pinned by hash detected -- score normalized to 6 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits Signed-Releases 🟢 10 5 out of the last 5 releases have a total of 5 signed artifacts. Fuzzing ⚠️ 0 project is not fuzzed Branch-Protection 🟢 8 branch protection is not maximal on development and all release branches Contributors 🟢 6 project has 2 contributing companies or organizations -- score normalized to 6 CI-Tests 🟢 10 13 out of 13 merged PRs checked by a CI test -- score normalized to 10
actions/step-security/harden-runner	fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594	🟢 7.8	Details Check Score Reason Binary-Artifacts 🟢 10 no binaries found in the repo Branch-Protection 🟢 8 branch protection is not maximal on development and all release branches CI-Tests 🟢 10 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Code-Review 🟢 10 all changesets reviewed Contributors 🟢 6 project has 2 contributing companies or organizations -- score normalized to 6 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Dependency-Update-Tool 🟢 10 update tool detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Maintained 🟢 10 30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected Pinned-Dependencies 🟢 6 dependency not pinned by hash detected -- score normalized to 6 SAST 🟢 9 SAST tool detected but not run on all commits Security-Policy 🟢 10 security policy file detected Signed-Releases ⚠️ -1 no releases found Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Vulnerabilities ⚠️ 0 22 existing vulnerabilities detected

Scanned Files

• .github/workflows/update-CloudformationTemplate-auto_create_sm_relationships.yml

[Copilot]

🟡 Changes recommended

Partial reads, suppressed failures, invalid parameter handling, and early watchdog timeouts can produce incomplete or incorrect operation.

Get a fresh assessment by requesting another Copilot review.

Pull request overview

Adds Windows support for warming FSx for ONTAP performance tiers and improves regional listing scripts.

Changes:

• Adds a parallel PowerShell warming utility.
• Supports comma-separated regions and responsive watchdogs.
• Expands usage documentation.

File summaries

File	Description
WarmPerformanceTier.ps1	Adds Windows warming implementation.
warm_performance_tier/README.md	Documents Windows usage.
list_fsxn_volumes	Adds multi-region parsing and watchdog polling.
list_fsxn_svms	Adds multi-region parsing and watchdog polling.
list_fsxn_filesystems	Adds multi-region parsing and watchdog polling.

Review details

Suppressed comments (1)

Management-Utilities/warm_performance_tier/README.md:136

• Correct the heading typo from “Runing” to “Running.”

### Runing the script on a Windows based operating system

• Files reviewed: 5/5 changed files
• Comments generated: 13
• Review effort level: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Copilot review overview

🟡 Changes recommended

Pagination, configuration, workflow-discovery, timeout, and CloudFormation defects can prevent correct deployment or leave volumes unprocessed.

Review effort: Balanced
Findings: 4 · 8 · 4

Open (16)

• Use a supported GitHub Actions workflow extension · New
• Follow ONTAP pagination links under _links.next.href · New
• Paginate DynamoDB credential scans · New
• Avoid empty alarm actions when no SNS topic is configured · New
• Reject non-space whitespace in share names · New
• Add a timeout to the ONTAP request · New
• Convert maxSnapMirrorRelationships to an integer · New
• Check the secrets table parameter for IAM permissions · New
• Handle the singular one-hour EventBridge rate · New
• Correct the maxSnapMirrorRelationships environment variable name · New
• Quote and safely construct the JSON argument · New
• Propagate enumeration failures to the final status · New
• Use the documented DynamoDB attribute names · New
• Mark the optional password argument as optional · New
• Correct descriptions for the file system password update · New
• Fix the platform description spelling · New

Resolved since last review (13)

• The script exits successfully even when one or more files could not be read. This makes scheduled…
• Stream.Read is allowed to return fewer bytes than requested even before EOF. Advancing to the…
• The full Get-ChildItem result is materialized before batching, so BatchSize does not bound…
• Enumeration failures are silently discarded, so an inaccessible subtree is omitted from $total…
• Validate the block size before using it as both an array length and an Int32 read count. Zero…
• Reject nonpositive worker counts during parameter binding. With 0 or a negative value, the…
• Starting i at 1 while looping with < maxTime * 2 performs only 2 * maxTime - 1 half-second…
• Starting i at 1 while looping with < maxTime * 2 performs only 2 * maxTime - 1 half-second…
• Starting i at 1 while looping with < maxTime * 2 performs only 2 * maxTime - 1 half-second…
• Correct the heading typo from “Runing” to “Running.” This issue also appears on line 136 of the…
• This introduction is grammatically incomplete (“One that designed”) and uses “name” where “named”…
• Correct the spelling of “separated” in the newly added usage text.
• Correct the spelling of “separated” in the newly added usage text.