Repository navigation
Conversation
Runs the Mend CLI dependency scan ("mend dep"), the path the DataStax Mend
onboarding runbook requires for repos outside IBM's GitHub Enterprise space.
Pushes to main and PRs against main report only; release tags also update the
Mend platform. Critical or High findings turn the job red without blocking
merges. Fork PRs are skipped because they get no secrets.
Needs MEND_USER_KEY, MEND_EMAIL and MEND_PRODUCTNAME before it can run.
Contributor
➡️ Unit Test Coverage Delta vs Main Branch
|
Contributor
Unit Test Coverage Report
|
Contributor
➡️ Integration Test Coverage Delta vs Main Branch (hcd-it)
|
Contributor
Integration Test Coverage Report (hcd-it)
|
Contributor
📈 Integration Test Coverage Delta vs Main Branch (dse69-it)
|
Contributor
Integration Test Coverage Report (dse69-it)
|
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this PR does:
Adds an
IBM Mend SCA Scanworkflow that runs the Mend CLI dependency scan (mend dep), the path the DataStax Mend onboarding runbook requires for repos outside IBM's GitHub Enterprise. Pushes tomainand pull requests againstmainonly report.v*release tags also update the Mend platform. Critical or High findings turn the job red without blocking merges, per the runbook. Fork PRs are skipped because they get no secrets. Results land underProducts//<MEND_PRODUCTNAME>//Data API - data-api.Which issue(s) this PR fixes:
No issue filed. Companion to #2663, which adds the IBM SonarQube scan.
Verification
actionlintis clean, with shellcheck on the run steps. Against a stubmendbinary, the Critical/High gate failed or passed correctly on five sample outputs,--updatewas added only for tag refs, and a failing CLI failed the step../mvnw compilepassed. The scan has not run against IBM Mend: theMEND_USER_KEY,MEND_EMAILandMEND_PRODUCTNAMEsecrets don't exist yet, so this PR's Mend job will fail until they do.Open questions: who provisions the three
MEND_*secrets, and is "Data API" the right DataStax product name for the Mend project? The gate reads the CLI's summary line with the runbook's pattern, which the first real run will confirm.Checklist