Skip to content

Service scan support - #1394

Open
attiasas wants to merge 8 commits into
jfrog:mainfrom
attiasas:service_scan_support
Open

Service scan support#1394
attiasas wants to merge 8 commits into
jfrog:mainfrom
attiasas:service_scan_support

Conversation

@attiasas

@attiasas attiasas commented Jul 30, 2026

Copy link
Copy Markdown
Contributor
  • All tests passed. If this feature is not already covered by the tests, I added new tests.
  • This pull request is on the dev branch.
  • I used gofmt for formatting the code before submitting the pull request.
  • Update documentation about new features / new supported technologies

Depends on:

Support scanning and reporting issues from Services (Missconfigurations) scan

image image

@attiasas attiasas added safe to test Approve running integration tests on a pull request new feature Automatically generated release notes labels Jul 30, 2026
@github-actions github-actions Bot removed the safe to test Approve running integration tests on a pull request label Jul 30, 2026
@attiasas attiasas added the safe to test Approve running integration tests on a pull request label Aug 2, 2026
@github-actions github-actions Bot removed the safe to test Approve running integration tests on a pull request label Aug 2, 2026
@attiasas attiasas mentioned this pull request Aug 2, 2026
4 tasks
@attiasas
attiasas requested a review from a team August 4, 2026 13:02
@attiasas attiasas added the safe to test Approve running integration tests on a pull request label Aug 4, 2026
@github-actions github-actions Bot removed the safe to test Approve running integration tests on a pull request label Aug 4, 2026
Comment thread go.mod
// replace github.com/jfrog/build-info-go => github.com/jfrog/build-info-go dev

// replace github.com/jfrog/jfrog-client-go => github.com/jfrog/jfrog-client-go master
// orto17:missconfiguration-service

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

don't forget

@Jordanh1996 Jordanh1996 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary goldens only cover “Not Scanned”

All summary/integration/expected_response goldens add | Services | ℹ️ Not Scanned | - |. No golden shows severity details when Services findings exist (only review-comment goldens do).

}
}

targetResults.ResultsStatus = results.ResultsStatus{

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what about status code for services here?

}
if withSastResults {
targetResults.JasResults.JasVulnerabilities.SastScanResults = []*sarif.Run{{}}
}

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do we need to extend this here for services too?

@Jordanh1996 Jordanh1996 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe add a services case in TestGetNewReviewComments?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

new feature Automatically generated release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants