mengzhx/semantica
1
0
Fork 0
mirror of https://github.com/semantica-agi/semantica.git synced 2026-08-29 04:26:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

Simplify security workflow and remove emojis

Browse Source 
- Removed scorecard results upload (no scorecard action available)
- Removed emojis from PR comments to avoid encoding issues
- Simplified workflow to core security tools only
- Maintained Safety, Bandit, and Semgrep scanning
- Fixed PR comment formatting for clean display
This commit is contained in:
KaifAhmad1
2026-02-09 15:00:11 +05:30
parent ec7528e96c
commit 8ba020a3ab
1 changed files with 7 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/security-scan.yml
+7 -13
View File
@@ -55,12 +55,6 @@ jobs:
safety-report.json
bandit-report.json
semgrep-report.json
- name: Upload Scorecard Results
uses: actions/upload-artifact@v4
with:
name: scorecard-results
path: scorecard-results.json
- name: Comment PR with Security Results
if: github.event_name == 'pull_request'
@@ -74,15 +68,15 @@ jobs:
try {
const safetyData = JSON.parse(fs.readFileSync('safety-report.json', 'utf8'));
if (safetyData.vulnerabilities && safetyData.vulnerabilities.length > 0) {
safetyResults = `## 🚨 Safety Vulnerabilities Found\\n`;
safetyResults = `## Safety Vulnerabilities Found\\n`;
safetyData.vulnerabilities.forEach(vuln => {
safetyResults += `- **${vuln.package}**: ${vuln.advisory}\\n`;
});
} else {
safetyResults = '## ✅ No Safety Vulnerabilities Found\\n';
safetyResults = '## No Safety Vulnerabilities Found\\n';
}
} catch (e) {
safetyResults = '## ⚠️ Safety scan failed\\n';
safetyResults = '## Safety scan failed\\n';
}
// Read bandit report
@@ -90,19 +84,19 @@ jobs:
try {
const banditData = JSON.parse(fs.readFileSync('bandit-report.json', 'utf8'));
if (banditData.results && banditData.results.length > 0) {
banditResults = `## 🚨 Bandit Security Issues Found\\n`;
banditResults = `## Bandit Security Issues Found\\n`;
banditData.results.forEach(issue => {
banditResults += `- **${issue.test_name}**: ${issue.filename}:${issue.line_number}\\n`;
});
} else {
banditResults = '## ✅ No Bandit Issues Found\\n';
banditResults = '## No Bandit Issues Found\\n';
}
} catch (e) {
banditResults = '## ⚠️ Bandit scan failed\\n';
banditResults = '## Bandit scan failed\\n';
}
// Create comment
const comment = `# 🔒 Security Scan Results\\n\\n${safetyResults}\\n\\n${banditResults}\\n\\n---\\n\\n*This security scan runs automatically on every PR and daily.*`;
const comment = `# Security Scan Results\\n\\n${safetyResults}\\n\\n${banditResults}\\n\\n---\\n\\n*This security scan runs automatically on every PR and bi-weekly.*`;
github.rest.issues.createComment({
issue_number: context.issue.number,