sharang/compliance-scanner-agent
1
0
Fork 0
Code Issues 79 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

feat(cve): notifications for the PLC control-app SBOM (shared helper) [#166] #173

Merged
sharang merged 1 commits from feat/plc-cve-notifications into main 2026-07-16 16:30:20 +00:00
Conversation 0 Commits 1 Files Changed 1
+76 -72
1 Commits
Author SHA1 Message Date
Sharang ParnerkarandClaude Opus 4.8 762bf0024d feat(cve): notifications for the PLC control-app SBOM (dedup shared helper)
CI / Check (pull_request) Successful in 5m16s
Details
CI / Detect Changes (pull_request) Has been skipped
Details
CI / Deploy Agent (pull_request) Has been skipped
Details
CI / Deploy Dashboard (pull_request) Has been skipped
Details
CI / Deploy Docs (pull_request) Has been skipped
Details
CI / Deploy MCP (pull_request) Has been skipped
Details 
The control-app SBOM CVE path (#166) stored alerts but created no notifications,
so CODESYS runtime/library CVEs never rang the dashboard bell.

Factor the alert-upsert + notification-creation out of run_pipeline into a shared
persist_cve_alerts(repo_id, repo_name, alerts) helper and call it from both the
SAST pipeline and persist_control_app_sbom. Now every SBOM source — source deps,
firmware, and CODESYS libraries/runtime — raises the same dedup'd CVE notifications.

Behavior for the existing SAST path is unchanged (same logic, extracted); the PLC
path additionally gains notifications. Completes the CVE loop for #166. Tracker #167.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-16 18:22:20 +02:00