Skip to content

[repo] respect CodeQL suppressions and stop truncating findings - #208

Merged
sethwv merged 2 commits into
Dispatcharr:mainfrom
sv-dispatcharr:feat/ql-suppression
Aug 2, 2026
Merged

[repo] respect CodeQL suppressions and stop truncating findings#208
sethwv merged 2 commits into
Dispatcharr:mainfrom
sv-dispatcharr:feat/ql-suppression

Conversation

@sethwv

@sethwv sethwv commented Aug 2, 2026

Copy link
Copy Markdown
Collaborator
  • Remove the 150-char truncation on CodeQL finding descriptions in the PR comment tables.
  • Parse SARIF suppressions (CodeQL's own record of a recognized inline codeql[...] comment) so suppressed findings no longer count toward the blocking/medium/low tallies, and add a dedicated "Suppressed findings" section that shows what was suppressed and why.
  • Add a CodeQL Suppression Used label, applied/cleared by codeql-analyze each run, and wire it into auto-merge-updates.yml's existing label check so any PR relying on a suppression always requires a maintainer to merge manually, even if it would otherwise qualify as an auto-mergeable plugin update.

@dispatcharr-plugins-bot dispatcharr-plugins-bot Bot added the Repo Update Scripts or other repository infrastructure. label Aug 2, 2026
@sethwv
sethwv merged commit dc2b251 into Dispatcharr:main Aug 2, 2026
10 checks passed
@sethwv
sethwv deleted the feat/ql-suppression branch August 2, 2026 13:28
sethwv added a commit to swvn-dispatch/PluginsRepoV2 that referenced this pull request Aug 2, 2026
Port upstream PR Dispatcharr#208 into pluginctl: SARIF results with a recognized
inline `codeql[...]` suppression no longer count toward blocking/medium/low
CodeQL findings, get their own "suppressed findings" table in the PR
comment, and gain a CodeQL Suppression Used label that forces manual review
before merge. Also drops the 150-char truncation on finding descriptions.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Repo Update Scripts or other repository infrastructure.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant