[repo] respect CodeQL suppressions and stop truncating findings - #208
Merged
Conversation
sethwv
commented
Aug 2, 2026
Collaborator
- Remove the 150-char truncation on CodeQL finding descriptions in the PR comment tables.
- Parse SARIF suppressions (CodeQL's own record of a recognized inline codeql[...] comment) so suppressed findings no longer count toward the blocking/medium/low tallies, and add a dedicated "Suppressed findings" section that shows what was suppressed and why.
- Add a CodeQL Suppression Used label, applied/cleared by codeql-analyze each run, and wire it into auto-merge-updates.yml's existing label check so any PR relying on a suppression always requires a maintainer to merge manually, even if it would otherwise qualify as an auto-mergeable plugin update.
sethwv
added a commit
to swvn-dispatch/PluginsRepoV2
that referenced
this pull request
Aug 2, 2026
Port upstream PR Dispatcharr#208 into pluginctl: SARIF results with a recognized inline `codeql[...]` suppression no longer count toward blocking/medium/low CodeQL findings, get their own "suppressed findings" table in the PR comment, and gain a CodeQL Suppression Used label that forces manual review before merge. Also drops the 150-char truncation on finding descriptions.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.