Compare commits
2 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| e7fffb0721 | |||
| 4523377b21 |
@@ -16,7 +16,7 @@ jobs:
|
|||||||
target: macos-arm64
|
target: macos-arm64
|
||||||
- os: macos-15-intel
|
- os: macos-15-intel
|
||||||
target: macos-x86_64
|
target: macos-x86_64
|
||||||
- os: ubuntu-22.04
|
- os: ubuntu-latest
|
||||||
target: linux-x86_64
|
target: linux-x86_64
|
||||||
- os: windows-latest
|
- os: windows-latest
|
||||||
target: windows-x86_64
|
target: windows-x86_64
|
||||||
|
|||||||
+23
-30
@@ -438,37 +438,30 @@ class ReportState:
|
|||||||
targets = self.run_record.get("targets_info") or []
|
targets = self.run_record.get("targets_info") or []
|
||||||
if not isinstance(targets, list):
|
if not isinstance(targets, list):
|
||||||
return None
|
return None
|
||||||
repo_targets = [
|
for target in targets:
|
||||||
target
|
if not isinstance(target, dict) or target.get("type") != "repository":
|
||||||
for target in targets
|
continue
|
||||||
if isinstance(target, dict) and target.get("type") == "repository"
|
details = target.get("details") or {}
|
||||||
]
|
if not isinstance(details, dict):
|
||||||
# Provenance binds the whole run to one repo; with multiple repo targets
|
continue
|
||||||
# that's ambiguous, so omit it rather than mis-attributing later repos'
|
uri = details.get("target_repo")
|
||||||
# findings to the first repo's URI/commit.
|
if not isinstance(uri, str) or not uri.strip():
|
||||||
if len(repo_targets) != 1:
|
continue
|
||||||
return None
|
|
||||||
target = repo_targets[0]
|
|
||||||
details = target.get("details") or {}
|
|
||||||
if not isinstance(details, dict):
|
|
||||||
return None
|
|
||||||
uri = details.get("target_repo")
|
|
||||||
if not isinstance(uri, str) or not uri.strip():
|
|
||||||
return None
|
|
||||||
|
|
||||||
context: dict[str, Any] = {"repositoryUri": uri.strip()}
|
context: dict[str, Any] = {"repositoryUri": uri.strip()}
|
||||||
full_name = _parse_repo_full_name(uri)
|
full_name = _parse_repo_full_name(uri)
|
||||||
if full_name:
|
if full_name:
|
||||||
context["repositoryFullName"] = full_name
|
context["repositoryFullName"] = full_name
|
||||||
cloned = details.get("cloned_repo_path")
|
cloned = details.get("cloned_repo_path")
|
||||||
if isinstance(cloned, str) and cloned.strip():
|
if isinstance(cloned, str) and cloned.strip():
|
||||||
commit, branch = _git_head(cloned.strip())
|
commit, branch = _git_head(cloned.strip())
|
||||||
if commit:
|
if commit:
|
||||||
context["commitSha"] = commit
|
context["commitSha"] = commit
|
||||||
if branch:
|
if branch:
|
||||||
context["branch"] = branch
|
context["branch"] = branch
|
||||||
context["ref"] = f"refs/heads/{branch}"
|
context["ref"] = f"refs/heads/{branch}"
|
||||||
return context
|
return context
|
||||||
|
return None
|
||||||
|
|
||||||
def _sync_llm_usage_record(self) -> None:
|
def _sync_llm_usage_record(self) -> None:
|
||||||
self.run_record["llm_usage"] = self._build_llm_usage_record()
|
self.run_record["llm_usage"] = self._build_llm_usage_record()
|
||||||
|
|||||||
@@ -63,18 +63,6 @@ _HANDLER_TAG = "_strix_scan_handler"
|
|||||||
# ``openai.agents`` is the openai-agents SDK's canonical logger root.
|
# ``openai.agents`` is the openai-agents SDK's canonical logger root.
|
||||||
_TRACKED_ROOTS: tuple[str, ...] = ("strix", "openai.agents")
|
_TRACKED_ROOTS: tuple[str, ...] = ("strix", "openai.agents")
|
||||||
|
|
||||||
_STDOUT_QUIET_ROOTS: frozenset[str] = frozenset({"openai.agents"})
|
|
||||||
|
|
||||||
|
|
||||||
class _StdoutQuietFilter(logging.Filter):
|
|
||||||
def filter(self, record: logging.LogRecord) -> bool:
|
|
||||||
if record.levelno >= logging.WARNING:
|
|
||||||
return True
|
|
||||||
return not any(
|
|
||||||
record.name == root or record.name.startswith(root + ".")
|
|
||||||
for root in _STDOUT_QUIET_ROOTS
|
|
||||||
)
|
|
||||||
|
|
||||||
|
|
||||||
def configure_dependency_logging() -> None:
|
def configure_dependency_logging() -> None:
|
||||||
"""Quiet dependency logging/warnings that obscure Strix scan logs."""
|
"""Quiet dependency logging/warnings that obscure Strix scan logs."""
|
||||||
@@ -131,7 +119,6 @@ def setup_scan_logging(run_dir: Path, *, debug: bool | None = None) -> Callable[
|
|||||||
stream_handler.setLevel(logging.DEBUG if debug else logging.ERROR)
|
stream_handler.setLevel(logging.DEBUG if debug else logging.ERROR)
|
||||||
stream_handler.setFormatter(formatter)
|
stream_handler.setFormatter(formatter)
|
||||||
stream_handler.addFilter(context_filter)
|
stream_handler.addFilter(context_filter)
|
||||||
stream_handler.addFilter(_StdoutQuietFilter())
|
|
||||||
setattr(stream_handler, _HANDLER_TAG, True)
|
setattr(stream_handler, _HANDLER_TAG, True)
|
||||||
|
|
||||||
tracked_loggers = [logging.getLogger(name) for name in _TRACKED_ROOTS]
|
tracked_loggers = [logging.getLogger(name) for name in _TRACKED_ROOTS]
|
||||||
|
|||||||
@@ -41,15 +41,6 @@ def test_repository_context_uri_only_without_clone() -> None:
|
|||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
def test_repository_context_none_for_multiple_repository_targets() -> None:
|
|
||||||
state = ReportState(run_name="t")
|
|
||||||
state.run_record["targets_info"] = [
|
|
||||||
{"type": "repository", "details": {"target_repo": "https://github.com/acme/widget"}},
|
|
||||||
{"type": "repository", "details": {"target_repo": "https://github.com/acme/api"}},
|
|
||||||
]
|
|
||||||
assert state._sarif_repository_context() is None
|
|
||||||
|
|
||||||
|
|
||||||
def test_repository_context_derives_commit_and_branch_from_clone(tmp_path: Path) -> None:
|
def test_repository_context_derives_commit_and_branch_from_clone(tmp_path: Path) -> None:
|
||||||
repo = tmp_path / "widget"
|
repo = tmp_path / "widget"
|
||||||
repo.mkdir()
|
repo.mkdir()
|
||||||
|
|||||||
Reference in New Issue
Block a user