v1.3.0
What's new
- Slash command feedback: Replace 👍/👎 links (opened a new tab) with
/sieve realand/sieve fp [rule]slash commands. Reply directly on the PR comment — no new tab, stays in GitHub. - PR comments now embed a hidden findings block so the action can match commands to specific findings and record them to Qdrant.
Usage
Add issue_comment trigger to your workflow to enable slash commands:
on:
pull_request:
types: [opened, synchronize, reopened]
issue_comment:
types: [created]Then reply on a PR comment:
/sieve fp— mark all findings as false positives/sieve real— mark all findings as real vulnerabilities/sieve fp sql-injection— mark a specific rule as false positive