-
Notifications
You must be signed in to change notification settings - Fork 307
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
CodeQL completed webhook check_run.output.summary includes relative link #1093
Comments
Thanks for your report. This is not the right place to raise the issue, but I will contact the team maintaining code scanning and they will get back to you. |
Hey, thanks for reporting and sorry for the delay in getting back to you - I had to check how the summaries were generated. Unfortunately the summaries are a data field, so we cannot post-process them for links easily, so we need to change the generation. That makes it a slightly larger change, but I have created an internal issue for us to track it. To help getting it prioritized would you mind sharing a bit about how you are using the summaries? |
No worries. This is fairly low impact and something I can work around in multiple ways. Nobody else on my team has even mentioned that the links don't work, so I may be the only one who tried them. Thus it seems pretty low priority. Offsetting that slightly, this looks like it a relatively trivial fix (once you find the right spot and information). and is clearly faulty in its current state. I have a webhook installed on the repo that, long story short, posts I could probably postprocess the link myself, as it already passes through another custom layer to convert GitHub outgoing webhook format to MSTeams incoming webhook format. It may be worth it just to optimize the message's visual footprint. (Maybe using the content of |
Thanks for sharing! That makes a lot of sense. |
In the webhook sent for the CodeQL check_run completion, the check_run.output.summary includes a markdown link similar to
[View all branch alerts](/{org}/{repo}/security/code-scanning?query=pr%3A{number}+tool%3ACodeQL+is%3Aopen)
. (The curly-braced text has been replaced in the actual payload.) Since I view this outside of github.com, the link is not useful. Opening the flawed link, then replacing the resulting host with github.com gets me to the right place. Can this link be updated to include a proper host?(Apologies if this is the wrong location for this report; it's unclear where to report what's probably an oversight in the "GitHub Code Scanning" app. I see this from a GitHub-hosted repo that uses a typical github/codeql-action/{init,analyze}@v1 setup and sends webhook updates including for check_run.)
The text was updated successfully, but these errors were encountered: