v1.4.0

What's new

• Per-finding emoji reactions: For each flagged finding, Sieve now posts a dedicated sub-comment in the PR thread:

  🔍 `missing-user-entrypoint` · `Dockerfile:7` · score 0.97
  React 👍 if this is a real vulnerability · 👎 if it's a false positive

• Reactions are picked up server-side every 15 minutes — no new tab, no typing required.
• Slash command fallback (/sieve real|fp) still works for keyboard users.

Usage

on:
  pull_request:
    types: [opened, synchronize, reopened]
  issue_comment:
    types: [created]

permissions:
  contents: read
  pull-requests: write

jobs:
  sieve:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: fendora-io/sieve-action@v1.4.0