Repository navigation
ci(mend): fix mend sca scan of packages - #602
Conversation
|
|
View your CI Pipeline Execution ↗ for commit 30b0136
💡 Verify your cache is correct by running tasks in a sandbox. Read docs ↗ ☁️ Nx Cloud last updated this comment at |
commit: |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## develop #602 +/- ##
========================================
Coverage 56.55% 56.55%
========================================
Files 105 105
Lines 28549 28549
Branches 1644 1644
========================================
Hits 16145 16145
Misses 12404 12404 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
fa6d273 to
30b0136
Compare
JIRA Ticket
Description
Mend SCA scan was not scanning anything because the lockfile was excluded from the scan directory (packages/). This stages just the manifests for the packages in a temporary directory for Mend to scan.
Tested workflow dispatch with the new options here: https://github.com/ForgeRock/forgerock-javascript-sdk/actions/runs/39979795702
Interpreting the Mend SCA scan results:
https://pingidentity.atlassian.net/wiki/x/KQDT1g