Repository navigation
feat: screenshot of a SARIF finding in GitHub code scanning (#13) - #14
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #13
Summary
static/screenshots/code-scanning-pr.png: the "Files changed" view of feat: let the agent run without prompts and add two MCP servers examples#1, taken without signing in. The diff ofCLAUDE.mdadds the never-ask line, and the code scanning annotation from cfgaudit (Error, CFG029) sits on line 5.reports.go: the screenshot on the SARIF format.Screenshotgets aLinkText, so each figure says where it links (GitHub or GitLab).templates/pages.html: usesLinkText.The caption states what GitHub shows. The pull request has seven code scanning alerts, but GitHub annotates only changed lines. The six findings without a line number (in
settings.jsonand.mcp.json) appear only in the Security tab, which needs write access; signed out it answers 404.Test plan
./scripts/build.shagainst v1.18.1; the SARIF section was checked in a browser.go test ./...,golangci-lint run(0 issues).AI assistance
Claude Code made the change, created the example repository and pull request, and took the screenshot.