✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Greptile Summary

Fixes a bug where approval request notifications (Slack, email, etc.) displayed incorrect environment names for multi-environment policies. Since PR #4220, policy.envId only points to one environment even when policies span multiple environments. This PR correctly uses the environment field from the request context to look up the environment by slug and projectId.

Changes:

• Updated 3 notification code paths (mergeSecretApprovalRequest, generateSecretApprovalRequest, generateSecretApprovalRequestV2Bridge) to use projectEnvDAL.findOne({ slug: environment, projectId }) instead of projectEnvDAL.findOne({ id: policy.envId })
• Each change retrieves the environment from the request context, which correctly represents the environment where the secret operation is being performed

This ensures notifications show the actual environment being modified, not just one of the environments covered by a multi-environment policy.

Confidence Score: 5/5

• This PR is safe to merge with minimal risk
• The change is a straightforward bug fix that replaces an incorrect data source (policy.envId) with the correct one (environment from request context). The fix is applied consistently across all three notification code paths, uses existing validated data from the DAL layer, and doesn't introduce any new security concerns or breaking changes.
• No files require special attention

Important Files Changed

_{Last reviewed commit: 68c5dcf}