FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Grade scan report from alert.action by mapleleafu · Pull Request #1494 · SocketDev/socket-cli · GitHub

/ socket-cli Public

Grade scan report from alert.action - #1494

Draft
Atakan Solak (mapleleafu) wants to merge 1 commit into
mainfrom
atakan/scan-report-use-alert-action
ConversationCommits (1)ChecksFiles changed
Draft

Grade scan report from alert.action#1494
Atakan Solak (mapleleafu) wants to merge 1 commit into
mainfrom
atakan/scan-report-use-alert-action

Conversation

Atakan Solak (mapleleafu) commented Aug 13, 2026 •
edited by cursor Bot
Loading

Copy link
Copy Markdown
Member

Summary

  • socket scan report and socket scan create --report now grade from each alert's resolved action on the full-scan payload, instead of re-fetching GET /v0/orgs/{org}/settings/security-policy.
  • That legacy map stays frozen after a Rules & Policies migration, so CI was still grading against stale issueRules.
  • Alerts with no action are skipped (the report stays healthy). scan report no longer requires security-policy:read.

Test plan

  • socket scan report on an ATR org still fails/passes the same way as before
  • socket scan report on a migrated R&P org grades against live policy actions, not the frozen security-policy GET
  • A token without security-policy:read can still run scan report
  • An alert with missing action does not fail CI

Note

Cursor Bugbot is generating a summary for commit 0b1076e. Configure here.

fix(scan): grade reports from alert.action
0b1076e 
Scan report no longer fetches GET /settings/security-policy. That map
stays frozen after Rules & Policies migration, so CI kept grading
against stale issueRules.

Grade from each alert's resolved action on the full-scan payload
instead. Alerts without an action are skipped.

Assisted-by: Cursor Grok 4.6
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

Back | FazBrowse Home | New Git URL