Skip to content

feat(pr-summary): Security summary comment in PRs #505

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jackseceng merged 66 commits into from
Apr 15, 2026
Merged

feat(pr-summary): Security summary comment in PRs #505

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
66 commits
Select commit Hold shift + click to select a range
d5dc982
feat(pr-summary): Security summary comment in PRs
jackseceng Apr 11, 2026
4513a0d
fix(triggers): Remove branch ignore main
jackseceng Apr 11, 2026
750989d
fix(summary): Update security comment summary PR logic
jackseceng Apr 11, 2026
a2b124d
fix(linter-findings): update gha yaml to fix linter findings
jackseceng Apr 12, 2026
8e2ea2c
test(dockerfile): Downgrading alpine version to check if summary show…
jackseceng Apr 12, 2026
a9de700
fix(workflow): Change trigger logic for security summary action
jackseceng Apr 12, 2026
fd554c7
test(semgrep): Revert dockerfile change, deliberate semgrep issue use…
jackseceng Apr 12, 2026
0bb848f
feat(summary): add print statement in runner
jackseceng Apr 12, 2026
604fc55
fix(summary): Update logic of all workflow to better trigger summary …
jackseceng Apr 12, 2026
9200bd7
fix(summary): remove non-security checks from workflow dependency
jackseceng Apr 12, 2026
a746424
fix(summary): Adjust permissions and ubuntu version
jackseceng Apr 12, 2026
3f6151d
fix(codeql): update permissions for PR checks
jackseceng Apr 12, 2026
957d11b
fix(codeql): update permissions
jackseceng Apr 12, 2026
7496f06
fix(codeql): update permissions
jackseceng Apr 12, 2026
810b293
fix(pr-checks): update permissions
jackseceng Apr 12, 2026
73cfaf7
fix(pr-checks): update permissions
jackseceng Apr 12, 2026
386842f
fix(pr-checks): update permissions
jackseceng Apr 12, 2026
8229b12
fix(pr-checks): update permissions
jackseceng Apr 12, 2026
1e6ea7a
fix(pr-checks): update permissions
jackseceng Apr 12, 2026
23db8c2
fix(pr-checks): update permissions
jackseceng Apr 12, 2026
aea8fba
fix(pr-checks): update permissions
jackseceng Apr 12, 2026
5ef644f
ci(summary): Change summary trigger to review being ready instead of …
jackseceng Apr 12, 2026
9909255
ci(summary): update url used to get security findings
jackseceng Apr 12, 2026
477028a
ci(container-scans): Reduce scope to just container related changes
jackseceng Apr 12, 2026
d7a32b1
ci(yaml-files): Simplify GHA trigger conditions
jackseceng Apr 12, 2026
f200472
ci(summary): Add additional logic to scrape security alerts
jackseceng Apr 12, 2026
7a5da10
ci(summary): add print statements for debugging
jackseceng Apr 12, 2026
9c0e8fd
ci(summary): add print statements to debug
jackseceng Apr 12, 2026
d8db3a9
ci(summary): update PR check logic to show introduced vulnerabilities…
jackseceng Apr 12, 2026
1a9de98
ci(summary): add vulnerabiltiy description to comment
jackseceng Apr 12, 2026
de25937
test(VULNERABILITY): Adding a DELIBERATLEY vulnerable docker image fo…
jackseceng Apr 12, 2026
71854c5
ci(summary): Cache findings for large amounts of vulnerabilities
jackseceng Apr 12, 2026
44250e0
ci(trivy-test): update contianer config for trivy to test older versions
jackseceng Apr 12, 2026
4760313
test(VULNERABILITY): new vulnerable ubuntu version for testing
jackseceng Apr 12, 2026
7ba90c3
ci(summary): fix table formatting
jackseceng Apr 12, 2026
4646ab7
ci(summary): update messaging
jackseceng Apr 12, 2026
ea399de
ci(summary): update messaging format
jackseceng Apr 12, 2026
871e50a
fix(summary): fix syntax error
jackseceng Apr 12, 2026
ed05d1c
ci(summary): update the source and formatting of the detail table
jackseceng Apr 12, 2026
def467a
ci(summary): update format
jackseceng Apr 12, 2026
1303186
ci(summary): adding markdown format to summary
jackseceng Apr 12, 2026
7e2439f
ci(summary): update messaging
jackseceng Apr 12, 2026
53f3da1
ci(summary): update messaging
jackseceng Apr 12, 2026
b17d18d
ci(summary): update messaging
jackseceng Apr 12, 2026
f6e13d4
ci(summary): update table format
jackseceng Apr 12, 2026
925c69a
ci(summary): remove cve links
jackseceng Apr 12, 2026
6f33506
ci(summary): remove cve column
jackseceng Apr 12, 2026
7587c62
fix(dockerfile): revert to clean version
jackseceng Apr 12, 2026
9acc860
ci(gha-workflows): update triggers to activate on PR being ready for …
jackseceng Apr 12, 2026
82d53a4
ci(codeql): update trigger logic
jackseceng Apr 12, 2026
25cc5c6
fix(index): fix integrity issue found by semgrep
jackseceng Apr 13, 2026
c365984
ci(workflows): re-factor all workflows to use dependant summary step …
jackseceng Apr 15, 2026
66cc482
ci(security): Adjust triggers and made security results only focus on…
jackseceng Apr 15, 2026
a04015c
fix(comment): add || true guards to prevent premature exit under bash -e
jackseceng Apr 15, 2026
8d16cb7
ci(container): migrate build to Blacksmith runner and actions
jackseceng Apr 15, 2026
d8f6f6b
ci(lint): remove ready for review trigger
jackseceng Apr 15, 2026
1fc0fb4
ci(lint): revert removal of ready for review trigger
jackseceng Apr 15, 2026
66e5e12
ci(lint): re-apply removal of ready for review trigger
jackseceng Apr 15, 2026
8cf220a
ci(container): revert migration to Blacksmith runner and actions
jackseceng Apr 15, 2026
f94105c
ci(security): rename gha file
jackseceng Apr 15, 2026
5eb56d3
ci(security): rename security file
jackseceng Apr 15, 2026
20d01f9
fix(comment): add || true guards to grep and arithmetic expansion to …
jackseceng Apr 15, 2026
d4b6e4a
ci(security): skip scans when irrelevant files change, always run com…
jackseceng Apr 15, 2026
e580f66
fix(comment): only fail job when scans ran, remove per-commit SHA fil…
jackseceng Apr 15, 2026
7d09ff3
fix(comment): count only HEAD SHA alerts for fail condition, show all…
jackseceng Apr 15, 2026
2249faf
fix(comment): use if block instead of bare [[ ]] && chain to avoid ba…
jackseceng Apr 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
54 changes: 0 additions & 54 deletions .github/workflows/codeql.yml
View file
Open in desktop

This file was deleted.

124 changes: 0 additions & 124 deletions .github/workflows/container.yml
View file
Open in desktop

This file was deleted.

2 changes: 1 addition & 1 deletion .github/workflows/conventional-commits.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,4 +17,4 @@ jobs:
uses: webiny/action-conventional-commits@faccb24fc2550dd15c0390d944379d2d8ed9690e # v1.3.1
with:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
allowed-commit-types: "feat,fix,chore,docs,refactor,build,ci"
allowed-commit-types: "feat,fix,chore,docs,refactor,build,ci,style,perf,test"
1 change: 0 additions & 1 deletion .github/workflows/lint.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,6 @@ on:
pull_request:
branches: [ "main" ]


permissions:
read-all

Expand Down
Loading
Loading