Skip to content

Commit 06a20cc

Browse files
SamMorrowDrumsCopilot
SamMorrowDrums
and
Copilot
authored
fix(security): preserve compatibility with compact typed outputs
Keep advertised input defaults while disabling runtime default injection for security filters. Normalize null CWE filters, compact findings, and verify modern wire outputs alongside exact legacy formatting. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
1 parent 3de5369 commit 06a20cc

23 files changed

Lines changed: 2308 additions & 182 deletions

‎pkg/github/__toolsnaps__/get_code_quality_finding.snap‎

Lines changed: 132 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,5 +27,136 @@
2727
],
2828
"type": "object"
2929
},
30-
"name": "get_code_quality_finding"
30+
"name": "get_code_quality_finding",
31+
"outputSchema": {
32+
"additionalProperties": false,
33+
"properties": {
34+
"created_at": {
35+
"description": "Finding creation time (RFC 3339).",
36+
"type": [
37+
"null",
38+
"string"
39+
]
40+
},
41+
"location": {
42+
"additionalProperties": false,
43+
"properties": {
44+
"end_column": {
45+
"type": [
46+
"null",
47+
"integer"
48+
]
49+
},
50+
"end_line": {
51+
"type": [
52+
"null",
53+
"integer"
54+
]
55+
},
56+
"path": {
57+
"type": [
58+
"null",
59+
"string"
60+
]
61+
},
62+
"start_column": {
63+
"type": [
64+
"null",
65+
"integer"
66+
]
67+
},
68+
"start_line": {
69+
"type": [
70+
"null",
71+
"integer"
72+
]
73+
}
74+
},
75+
"type": [
76+
"null",
77+
"object"
78+
]
79+
},
80+
"message": {
81+
"additionalProperties": false,
82+
"properties": {
83+
"markdown": {
84+
"type": "string"
85+
},
86+
"text": {
87+
"type": "string"
88+
}
89+
},
90+
"required": [
91+
"text",
92+
"markdown"
93+
],
94+
"type": [
95+
"null",
96+
"object"
97+
]
98+
},
99+
"number": {
100+
"type": [
101+
"null",
102+
"integer"
103+
]
104+
},
105+
"rule": {
106+
"additionalProperties": false,
107+
"properties": {
108+
"category": {
109+
"type": [
110+
"null",
111+
"string"
112+
]
113+
},
114+
"description": {
115+
"type": [
116+
"null",
117+
"string"
118+
]
119+
},
120+
"help": {
121+
"type": [
122+
"null",
123+
"string"
124+
]
125+
},
126+
"id": {
127+
"type": [
128+
"null",
129+
"string"
130+
]
131+
},
132+
"severity": {
133+
"type": [
134+
"null",
135+
"string"
136+
]
137+
},
138+
"title": {
139+
"type": [
140+
"null",
141+
"string"
142+
]
143+
}
144+
},
145+
"type": [
146+
"null",
147+
"object"
148+
]
149+
},
150+
"state": {
151+
"type": [
152+
"null",
153+
"string"
154+
]
155+
}
156+
},
157+
"type": [
158+
"null",
159+
"object"
160+
]
161+
}
31162
}

‎pkg/github/__toolsnaps__/get_code_scanning_alert.snap‎

Lines changed: 164 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,5 +27,168 @@
2727
],
2828
"type": "object"
2929
},
30-
"name": "get_code_scanning_alert"
30+
"name": "get_code_scanning_alert",
31+
"outputSchema": {
32+
"additionalProperties": false,
33+
"properties": {
34+
"dismissed_comment": {
35+
"type": [
36+
"null",
37+
"string"
38+
]
39+
},
40+
"dismissed_reason": {
41+
"type": [
42+
"null",
43+
"string"
44+
]
45+
},
46+
"html_url": {
47+
"type": [
48+
"null",
49+
"string"
50+
]
51+
},
52+
"most_recent_instance": {
53+
"additionalProperties": false,
54+
"properties": {
55+
"commit_sha": {
56+
"type": [
57+
"null",
58+
"string"
59+
]
60+
},
61+
"html_url": {
62+
"type": [
63+
"null",
64+
"string"
65+
]
66+
},
67+
"location": {
68+
"additionalProperties": false,
69+
"properties": {
70+
"end_column": {
71+
"type": [
72+
"null",
73+
"integer"
74+
]
75+
},
76+
"end_line": {
77+
"type": [
78+
"null",
79+
"integer"
80+
]
81+
},
82+
"path": {
83+
"type": [
84+
"null",
85+
"string"
86+
]
87+
},
88+
"start_column": {
89+
"type": [
90+
"null",
91+
"integer"
92+
]
93+
},
94+
"start_line": {
95+
"type": [
96+
"null",
97+
"integer"
98+
]
99+
}
100+
},
101+
"type": [
102+
"null",
103+
"object"
104+
]
105+
},
106+
"message": {
107+
"type": [
108+
"null",
109+
"string"
110+
]
111+
},
112+
"ref": {
113+
"type": [
114+
"null",
115+
"string"
116+
]
117+
},
118+
"state": {
119+
"type": [
120+
"null",
121+
"string"
122+
]
123+
}
124+
},
125+
"type": [
126+
"null",
127+
"object"
128+
]
129+
},
130+
"number": {
131+
"type": [
132+
"null",
133+
"integer"
134+
]
135+
},
136+
"rule": {
137+
"additionalProperties": false,
138+
"properties": {
139+
"description": {
140+
"type": [
141+
"null",
142+
"string"
143+
]
144+
},
145+
"help": {
146+
"type": [
147+
"null",
148+
"string"
149+
]
150+
},
151+
"id": {
152+
"type": [
153+
"null",
154+
"string"
155+
]
156+
},
157+
"name": {
158+
"type": [
159+
"null",
160+
"string"
161+
]
162+
},
163+
"security_severity_level": {
164+
"description": "Security impact level, distinct from rule diagnostic severity.",
165+
"type": [
166+
"null",
167+
"string"
168+
]
169+
},
170+
"severity": {
171+
"type": [
172+
"null",
173+
"string"
174+
]
175+
}
176+
},
177+
"type": [
178+
"null",
179+
"object"
180+
]
181+
},
182+
"state": {
183+
"type": [
184+
"null",
185+
"string"
186+
]
187+
}
188+
},
189+
"type": [
190+
"null",
191+
"object"
192+
]
193+
}
31194
}

0 commit comments

Comments
 (0)