Skip to content

Conversation

AdamKorcz
Copy link
Contributor

What kind of change does this PR introduce?

(Is it a bug fix, feature, docs update, something else?)

feature

What is the current behavior?

Scorecard does not support KICS.

What is the new behavior (if this is a feature change)?**

Scorecard supports KICS.

  • Tests for the changes have been added (for bug fixes/features)

Which issue(s) this PR fixes

Partially fixes #2318 (comment)

Special notes for your reviewer

Does this PR introduce a user-facing change?

Support KICS SAST.

@AdamKorcz AdamKorcz requested a review from a team as a code owner June 28, 2025 18:54
@AdamKorcz AdamKorcz requested review from justaugustus and raghavkaul and removed request for a team June 28, 2025 18:54
@AdamKorcz AdamKorcz temporarily deployed to integration-test June 28, 2025 18:55 — with GitHub Actions Inactive
Copy link

codecov bot commented Jun 28, 2025

Codecov Report

Attention: Patch coverage is 50.00000% with 3 lines in your changes missing coverage. Please review.

Project coverage is 68.28%. Comparing base (353ed60) to head (9c7e63d).
Report is 188 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #4687      +/-   ##
==========================================
+ Coverage   66.80%   68.28%   +1.47%     
==========================================
  Files         230      249      +19     
  Lines       16602    18890    +2288     
==========================================
+ Hits        11091    12899    +1808     
- Misses       4808     5131     +323     
- Partials      703      860     +157     
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@AdamKorcz AdamKorcz marked this pull request as draft June 28, 2025 19:12
@AdamKorcz AdamKorcz temporarily deployed to integration-test June 30, 2025 11:04 — with GitHub Actions Inactive
@AdamKorcz AdamKorcz marked this pull request as ready for review June 30, 2025 11:08
AdamKorcz added 2 commits July 9, 2025 19:43
Signed-off-by: Adam Korczynski <[email protected]>
Signed-off-by: Adam Korczynski <[email protected]>
Copy link

This pull request has been marked stale because it has been open for 10 days with no activity

Copy link

This pull request has been marked stale because it has been open for 10 days with no activity

Copy link
Member

@spencerschrock spencerschrock left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

and probably fix tests

@@ -49,7 +49,11 @@ func Test_SAST(t *testing.T) {
name: "SAST checker should return min score when no PRs are found",
commits: []clients.Commit{},
searchresult: clients.SearchResponse{},
checkRuns: []clients.CheckRun{},
searchRequest: clients.SearchRequest{
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

search request revert #4685

Query: "github/Checkmarx/kics-github-action",
Path: "/.github/workflows",
},
checkRuns: []clients.CheckRun{
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

including checkruns revert #4685

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

Add more options for SAST tools
3 participants