Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Code Scanning Bugs #87

Merged
merged 7 commits into from
Dec 4, 2024
Merged

Fix Code Scanning Bugs #87

merged 7 commits into from
Dec 4, 2024

Conversation

GeekMasher
Copy link
Contributor

@GeekMasher GeekMasher commented Dec 4, 2024

This pull request includes several updates and improvements to the ghas-reviewer-app project. The most important changes involve version updates, configuration adjustments, and enhancements to the logging and error handling mechanisms.

Version and Configuration Updates:

Code Enhancements:

  • ghasreview/__main__.py: Modified the app's run command to use a configurable debug setting from the environment.
  • ghasreview/app.py: Improved logging messages, added a severity check comment, and enhanced error handling for team creation and alert reopening processes. [1] [2]

Logging and Error Handling Improvements:

  • ghasreview/client.py: Changed logging levels from debug to error for better visibility when a team does not exist and ensured correct URL usage in createTeam method. [1] [2]
  • ghasreview/setup.py: Added a debug configuration setting to the setup process.

@GeekMasher GeekMasher self-assigned this Dec 4, 2024
Copy link

github-actions bot commented Dec 4, 2024

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA e2df6c8.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

PackageVersionScoreDetails

Scanned Files

ghasreview/app.py Dismissed Show dismissed Hide dismissed
ghasreview/client.py Dismissed Show dismissed Hide dismissed
@GeekMasher GeekMasher requested a review from theztefan December 4, 2024 14:19
README.md Show resolved Hide resolved
README.md Show resolved Hide resolved
Copy link
Collaborator

@theztefan theztefan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@GeekMasher looks good!

I can see the feature of making a dismissal comment mandatory be used by few organizations.
We should probably expand and add it to Secret Scanning and Dependabot alerts resolution as well next.

@GeekMasher GeekMasher merged commit 96c66f0 into main Dec 4, 2024
10 checks passed
@GeekMasher GeekMasher deleted the fix-code-scanning branch December 4, 2024 15:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants