Skip to content

Closing/dismissing alerts #504

@klippx

Description

@klippx

Today scan-action automatically creates new alerts in GH Code Scanning Alerts but as packages get auto fixed these alerts stick around.

  1. Can scan-action look for alerts it "created" and close them when it can be determined they are fixed (i.e. package 1.2 has an error but the project now uses 1.3 - so dismiss the alert since it is stale/fixed)

According to this 3 years old issue #142 then it's even worse, because dismissing these alerts will not help as scan-action will re-open them. I have yet to confirm this.

  1. Can scan-action keep track of alerts it "created" but has been dismissed and not create new ones / reopen them as they should be considered muted ?

Maybe people have moved on to more useful code scanning tools that integrate better with GH? Any tips are welcome!

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    Status

    Ready

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions