Skip to content

fix: upload trivy report to step summary and truncate PR comment if too large #246

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
chgl merged 2 commits into from
May 24, 2026
Merged

fix: upload trivy report to step summary and truncate PR comment if too large #246

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
393da95
fix: truncate trivy PR comment if too long and upload to step summary
Copilot May 24, 2026
e9e63e0
Potential fix for pull request finding
chgl May 24, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions .github/workflows/standard-build.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -286,6 +286,20 @@ jobs:
--ignore-unfixed="${TRIVY_IGNORE_UNFIXED}" \
"${IMAGE_TO_SCAN}"

- name: Upload trivy report to step summary and truncate PR comment if too long
if: ${{ github.event_name == 'pull_request' && inputs.enable-trivy-scan }}
env:
SUMMARY_URL: "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
IS_FORK: "${{ github.event.pull_request.head.repo.fork }}"
run: |
cat trivy-pr-report.md >> "$GITHUB_STEP_SUMMARY"
# GitHub PR comments are limited to 65536 characters
MAX_PR_COMMENT_SIZE=65536
report_size=$(wc -c < trivy-pr-report.md)
if [ "$IS_FORK" != "true" ] && [ "$report_size" -gt "$MAX_PR_COMMENT_SIZE" ]; then
printf "The Trivy vulnerability report is too large to display as a PR comment.\n\nPlease view the full report in the [workflow run summary](%s).\n" "$SUMMARY_URL" > trivy-pr-report.md
fi
Comment thread
chgl marked this conversation as resolved.

- name: Add trivy report PR comment
uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
# when running from a fork, the CI token doesn't have enough permissions to create PR comments
Expand Down