Skip to content

Improve solution to omit Code Scanning GH feature #37

@miroslavpojer

Description

@miroslavpojer

Feature Description

Current solution is:

  1. mining data from AquaSec API
  2. transform them into SARIF file
  3. upload into GH Security Tab - visible in enabled Code Scanning feature
  4. collect from GH Security Tab
  5. create/sync GH issues - one per alert + one type alert parent

Problem / Opportunity

Code Scanning GH feature is paid feature per developer with active commit in repo.
Tha mian goal is to provide issue with all needed details for fix problem, Alert is not used in this process by team members.

Acceptance Criteria

  1. Code Scanning feature can be disabled and team members still receive alert issues.

Proposed Solution

  1. Store json file next to sarif one after data mining.
  2. Add option to read from mined json file instead of from alert GH api.

Dependencies / Related

No response

Additional Context

No response

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions