[Feature Request] Add notice/warning/error messages for PR violations

[mmablom]

Product Area

The “Run Salesforce Code Analyzer” GitHub Action

Your Need or Problem

Currently the violations for files changed in the PR are split out from the global violations but not easily navigable. Using the list of violations I have to navigate to file & line myself.

Your Desired Solution

It would be helpful if the violations reported for files in the PR could be reported as annotations at the proper location. This should be possible by using messages from Worfklow Commands: https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-commands#setting-an-error-message

Alternatives Considered

No response

Additional Context (Screenshots, Files, etc)

As an example, this is how the PMD Action reports violations:

Workaround

No response

Urgency

Low

[git2gus]

This issue has been linked to a new work item: W-19803701

[codefriar]

Hey team, if you want to crib from / lift / adopt it i have a pretty feature-rich fork of Mitch Spano's sfdx-scan-pull-request here:
https://github.com/codefriar/sfdx-scan-pull-request

the scannerv5 branch (<--- this is important) uses v5 of the sf code analyzer. it's capable of registering check runs, and PR comments. It also (helpfully?) filters the sarif file - limiting the violations reported to the 50 (github sarif uploader limitation) most critical that occur within the changed lines of your PR.