Skip to content

feat: Add possibility to upload SAST results to a PR comment#90

Merged
ppawlowski merged 16 commits intomainfrom
fix-sast-no-gh-upload
Jan 22, 2026
Merged

feat: Add possibility to upload SAST results to a PR comment#90
ppawlowski merged 16 commits intomainfrom
fix-sast-no-gh-upload

Conversation

@ppawlowski
Copy link
Collaborator

@ppawlowski ppawlowski commented Jan 16, 2026

Description

This pull request extends the Codebase SAST Scan workflow by adding a possibility to decide where scan report should be published.
By default, it sends it to the GitHub Advanced Security solution. Additionally, it can be also published as a pull request comment, if a workflow was initiated by the pull_request event.

Related Issue(s)

https://github.com/FlowFuse/CloudProject/issues/1043

Checklist

  • I have read the contribution guidelines
  • Suitable unit/system level tests have been added and they pass
  • Documentation has been updated
    • Upgrade instructions
    • Configuration details
    • Concepts
  • Changes flowforge.yml?
    • Issue/PR raised on FlowFuse/helm to update ConfigMap Template
    • Issue/PR raised on FlowFuse/CloudProject to update values for Staging/Production
  • Link to Changelog Entry PR, or note why one is not needed.

Labels

  • Includes a DB migration? -> add the area:migration label

@ppawlowski
Add options to upload SAST scan results to GitHub and PR comments
1f8c6a0
@ppawlowski
Upload SAST scan result to GHAction summary
7ffadd4
@ppawlowski
Switch to junit results approach
fd47e5f
@ppawlowski
Check junit approach
8f14bbd
@ppawlowski
Add PR comment with tests result
5316ce9
@ppawlowski
Improive pr comment
8231a9d
@ppawlowski
Switch back to previous approach with PR comment
2aeb3ff
@ppawlowski
Do not add scan report to run summary
56a3a0a
@ppawlowski
Check junit approach
7c3e67b
@ppawlowski
Add PR comment with tests result
1e7a3cc
@ppawlowski
Improive pr comment
e3d8df4
@ppawlowski
Switch back to previous approach with PR comment
5ddd221
@ppawlowski
Do not add scan report to run summary
d3c841c
@ppawlowski
Merge branch 'fix-sast-no-gh-upload' of github.com:flowforge/github-a…
6f786e5 
…ctions-workflows into fix-sast-no-gh-upload
@ppawlowski
Revert "Merge branch 'fix-sast-no-gh-upload' of github.com:flowforge/…
dda08c2 
…github-actions-workflows into fix-sast-no-gh-upload"

This reverts commit 6f786e5, reversing
changes made to d3c841c.
@ppawlowski
Remove junit publish step
00f454c
@ppawlowski ppawlowski requested a review from knolleary January 16, 2026 13:19
@ppawlowski ppawlowski enabled auto-merge (squash) January 16, 2026 13:19
@ppawlowski ppawlowski merged commit 8928777 into main Jan 22, 2026
@ppawlowski ppawlowski deleted the fix-sast-no-gh-upload branch January 22, 2026 13:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@knolleary knolleary knolleary approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ppawlowski @knolleary