The current report lacks:
- Details for the 40 Code Scanning Rules Applied
- Links to a CWE-* resource would also be appreciated
I was trying to get this information into a comment in the PR, just to provide some context for developers working on that PR but I can't configure a custom report yet.
Some recommendations could be integrating it with https://github.com/marketplace/actions/pr-comment-from-file with a markdown based report to add a comment to the PR.
The current report lacks:
I was trying to get this information into a comment in the PR, just to provide some context for developers working on that PR but I can't configure a custom report yet.
Some recommendations could be integrating it with https://github.com/marketplace/actions/pr-comment-from-file with a markdown based report to add a comment to the PR.