Skip to content

ci(mend): fix mend sca scan of packages - #602

Merged
ancheetah merged 1 commit into
developfrom
fix-mend-sca
Oct 23, 2026
Merged

ancheetah merged 1 commit into
developfrom
fix-mend-sca

Conversation

@ancheetah

@ancheetah ancheetah commented Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

JIRA Ticket

Description

Mend SCA scan was not scanning anything because the lockfile was excluded from the scan directory (packages/). This stages just the manifests for the packages in a temporary directory for Mend to scan.

Tested workflow dispatch with the new options here: https://github.com/ForgeRock/forgerock-javascript-sdk/actions/runs/39979795702

Interpreting the Mend SCA scan results:
https://pingidentity.atlassian.net/wiki/x/KQDT1g

@changeset-bot

changeset-bot Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 30b0136

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions github-actions Bot added the CI label Oct 23, 2026
@nx-cloud

nx-cloud Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

View your CI Pipeline Execution ↗ for commit 30b0136

Command Status Duration Result
nx affected -t build lint test docs e2e-ci ✅ Succeeded 43s View ↗
nx-cloud record -- nx format:check --verbose ✅ Succeeded <1s View ↗

💡 Verify your cache is correct by running tasks in a sandbox. Read docs ↗


☁️ Nx Cloud last updated this comment at 2026-10-23 16:06:26 UTC

@pkg-pr-new

pkg-pr-new Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

Open in StackBlitz

pnpm add https://pkg.pr.new/ForgeRock/forgerock-javascript-sdk/@forgerock/javascript-sdk@602
pnpm add https://pkg.pr.new/ForgeRock/forgerock-javascript-sdk/@forgerock/ping-protect@602
pnpm add https://pkg.pr.new/ForgeRock/forgerock-javascript-sdk/@forgerock/token-vault@602

commit: 30b0136

@codecov-commenter

codecov-commenter commented Oct 23, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 56.55%. Comparing base (f5caafe) to head (30b0136).

Additional details and impacted files
@@           Coverage Diff            @@
##           develop     #602   +/-   ##
========================================
  Coverage    56.55%   56.55%           
========================================
  Files          105      105           
  Lines        28549    28549           
  Branches      1644     1644           
========================================
  Hits         16145    16145           
  Misses       12404    12404           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@ancheetah
ancheetah marked this pull request as draft October 23, 2026 16:32
@ancheetah
ancheetah marked this pull request as ready for review October 23, 2026 19:33
@ancheetah
ancheetah merged commit 0a788c2 into develop Oct 23, 2026
8 checks passed
@ancheetah
ancheetah deleted the fix-mend-sca branch October 23, 2026 19:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Development

Successfully merging this pull request may close these issues.

3 participants