feat(DATAGO-121121): Add PR diff feature and PR comment and status check with fossa-guard. #60
+295
−3
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Integrate PR integration enhancements from maas-build-actions #581: - Add enable_diff_mode input to show only newly introduced issues - Add diff_base_revision_sha input for base branch comparison - Add enable_license_enrichment input for license indicators - Pass GitHub context variables (EVENT_NAME, REF, SHA, HEAD_REF, BASE_REF) - Update README with comprehensive examples and documentation New Features: - Diff mode compares PR against base branch (auto-detects default branch) - License enrichment shows declared/discovered indicators - Enhanced PR workflow examples (basic, diff mode, REPORT mode) - Mode behavior clarification (BLOCK vs REPORT) - Migration path for gradual adoption All features are opt-in and backwards compatible. Related: SolaceDev/maas-build-actions#581 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <[email protected]>
johnvincentcorpuz
changed the title
Make PR integration opt-in by setting defaults to false: - enable_pr_comment: false (was true) - enable_status_check: false (was true) This ensures backwards compatibility and requires users to explicitly enable PR integration features. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <[email protected]>
| description: "GitHub token for PR comments and status checks" | ||
| required: false | ||
| default: ${{ github.token }} | ||
| enable_pr_comment: |
Contributor
Author
There was a problem hiding this comment.
This is off by default.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Integrate PR integration enhancements from maas-build-actions #581 into the FOSSA Guard GitHub Action wrapper.
This PR completes the PR integration feature set by adding support for diff mode and license enrichment, along with comprehensive documentation updates.
The PR diff feature will only report new issues found on the PR when diffing against the default branch.
Status checks are also emitted as part of the action.
Changes Made
Environment Variable Mapping for Status Check and PR Commenting.
GITHUB_EVENT_NAME,GITHUB_REF,GITHUB_SHA,GITHUB_HEAD_REF,GITHUB_BASE_REFComprehensive Documentation Updates
New Sections in README
Enhanced Workflow Examples
Improved Troubleshooting
Key Features
✅ Diff Mode - Compares PR branch against base, shows only newly introduced issues, auto-detects default branch
✅ License Enrichment - Shows declared vs discovered license indicators
✅ Complete PR Integration - Comments, status checks, and diff mode work together seamlessly
Backwards Compatibility
✅ Fully backwards compatible - All new features are opt-in with sensible defaults:
enable_diff_mode:false(disabled by default)enable_license_enrichment:true(enabled by default)Existing workflows continue to work without any changes.
Files Changed
Related
Next Steps
:latesttag which will pull the final merged version from maas-build-actions🤖 Generated with Claude Code
Co-Authored-By: Claude [email protected]