Skip to content

Commit fa1e8e7

Browse files
SamMorrowDrumsCopilot
SamMorrowDrums
and
Copilot
committed
fix(security): preserve compatibility with compact typed outputs
Keep advertised input defaults while disabling runtime default injection for security filters. Normalize null CWE filters, compact findings, and verify modern wire outputs alongside exact legacy formatting. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
1 parent 6247847 commit fa1e8e7

23 files changed

Lines changed: 2308 additions & 182 deletions

‎pkg/github/__toolsnaps__/get_code_quality_finding.snap‎

Lines changed: 132 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,5 +27,136 @@
2727
],
2828
"type": "object"
2929
},
30-
"name": "get_code_quality_finding"
30+
"name": "get_code_quality_finding",
31+
"outputSchema": {
32+
"additionalProperties": false,
33+
"properties": {
34+
"created_at": {
35+
"description": "Finding creation time (RFC 3339).",
36+
"type": [
37+
"null",
38+
"string"
39+
]
40+
},
41+
"location": {
42+
"additionalProperties": false,
43+
"properties": {
44+
"end_column": {
45+
"type": [
46+
"null",
47+
"integer"
48+
]
49+
},
50+
"end_line": {
51+
"type": [
52+
"null",
53+
"integer"
54+
]
55+
},
56+
"path": {
57+
"type": [
58+
"null",
59+
"string"
60+
]
61+
},
62+
"start_column": {
63+
"type": [
64+
"null",
65+
"integer"
66+
]
67+
},
68+
"start_line": {
69+
"type": [
70+
"null",
71+
"integer"
72+
]
73+
}
74+
},
75+
"type": [
76+
"null",
77+
"object"
78+
]
79+
},
80+
"message": {
81+
"additionalProperties": false,
82+
"properties": {
83+
"markdown": {
84+
"type": "string"
85+
},
86+
"text": {
87+
"type": "string"
88+
}
89+
},
90+
"required": [
91+
"text",
92+
"markdown"
93+
],
94+
"type": [
95+
"null",
96+
"object"
97+
]
98+
},
99+
"number": {
100+
"type": [
101+
"null",
102+
"integer"
103+
]
104+
},
105+
"rule": {
106+
"additionalProperties": false,
107+
"properties": {
108+
"category": {
109+
"type": [
110+
"null",
111+
"string"
112+
]
113+
},
114+
"description": {
115+
"type": [
116+
"null",
117+
"string"
118+
]
119+
},
120+
"help": {
121+
"type": [
122+
"null",
123+
"string"
124+
]
125+
},
126+
"id": {
127+
"type": [
128+
"null",
129+
"string"
130+
]
131+
},
132+
"severity": {
133+
"type": [
134+
"null",
135+
"string"
136+
]
137+
},
138+
"title": {
139+
"type": [
140+
"null",
141+
"string"
142+
]
143+
}
144+
},
145+
"type": [
146+
"null",
147+
"object"
148+
]
149+
},
150+
"state": {
151+
"type": [
152+
"null",
153+
"string"
154+
]
155+
}
156+
},
157+
"type": [
158+
"null",
159+
"object"
160+
]
161+
}
31162
}

‎pkg/github/__toolsnaps__/get_code_scanning_alert.snap‎

Lines changed: 164 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,5 +27,168 @@
2727
],
2828
"type": "object"
2929
},
30-
"name": "get_code_scanning_alert"
30+
"name": "get_code_scanning_alert",
31+
"outputSchema": {
32+
"additionalProperties": false,
33+
"properties": {
34+
"dismissed_comment": {
35+
"type": [
36+
"null",
37+
"string"
38+
]
39+
},
40+
"dismissed_reason": {
41+
"type": [
42+
"null",
43+
"string"
44+
]
45+
},
46+
"html_url": {
47+
"type": [
48+
"null",
49+
"string"
50+
]
51+
},
52+
"most_recent_instance": {
53+
"additionalProperties": false,
54+
"properties": {
55+
"commit_sha": {
56+
"type": [
57+
"null",
58+
"string"
59+
]
60+
},
61+
"html_url": {
62+
"type": [
63+
"null",
64+
"string"
65+
]
66+
},
67+
"location": {
68+
"additionalProperties": false,
69+
"properties": {
70+
"end_column": {
71+
"type": [
72+
"null",
73+
"integer"
74+
]
75+
},
76+
"end_line": {
77+
"type": [
78+
"null",
79+
"integer"
80+
]
81+
},
82+
"path": {
83+
"type": [
84+
"null",
85+
"string"
86+
]
87+
},
88+
"start_column": {
89+
"type": [
90+
"null",
91+
"integer"
92+
]
93+
},
94+
"start_line": {
95+
"type": [
96+
"null",
97+
"integer"
98+
]
99+
}
100+
},
101+
"type": [
102+
"null",
103+
"object"
104+
]
105+
},
106+
"message": {
107+
"type": [
108+
"null",
109+
"string"
110+
]
111+
},
112+
"ref": {
113+
"type": [
114+
"null",
115+
"string"
116+
]
117+
},
118+
"state": {
119+
"type": [
120+
"null",
121+
"string"
122+
]
123+
}
124+
},
125+
"type": [
126+
"null",
127+
"object"
128+
]
129+
},
130+
"number": {
131+
"type": [
132+
"null",
133+
"integer"
134+
]
135+
},
136+
"rule": {
137+
"additionalProperties": false,
138+
"properties": {
139+
"description": {
140+
"type": [
141+
"null",
142+
"string"
143+
]
144+
},
145+
"help": {
146+
"type": [
147+
"null",
148+
"string"
149+
]
150+
},
151+
"id": {
152+
"type": [
153+
"null",
154+
"string"
155+
]
156+
},
157+
"name": {
158+
"type": [
159+
"null",
160+
"string"
161+
]
162+
},
163+
"security_severity_level": {
164+
"description": "Security impact level, distinct from rule diagnostic severity.",
165+
"type": [
166+
"null",
167+
"string"
168+
]
169+
},
170+
"severity": {
171+
"type": [
172+
"null",
173+
"string"
174+
]
175+
}
176+
},
177+
"type": [
178+
"null",
179+
"object"
180+
]
181+
},
182+
"state": {
183+
"type": [
184+
"null",
185+
"string"
186+
]
187+
}
188+
},
189+
"type": [
190+
"null",
191+
"object"
192+
]
193+
}
31194
}

0 commit comments

Comments
 (0)