Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make alert messages in issue more helpful #44

Open
dbartholomae opened this issue Nov 3, 2022 · 1 comment
Open

Make alert messages in issue more helpful #44

dbartholomae opened this issue Nov 3, 2022 · 1 comment

Comments

@dbartholomae
Copy link
Contributor

Hi there!

I've just implemented the GitHub Actions at a company, and there are some things which are cumbersome around the workflow. This issue specifically addresses the "Issue" created and missing information in it.

  1. The individual alerts are hard to understand without more context.

    To solve this, I would add information about the severity and add a link to the description for each alert. I already provided a PR (Make alert messages in issue more helpful #43) for this.

  2. It's hard to see which alerts are more and which are less important

    For this, I would group the alerts by severity.

  3. There's no good summary for the overall report

    Here, I would recreate the summary table from the markdown report and add it to the top of the issue.

In addition, I would like to add a testing framework and some tests to be able to more confidently work on the code.

@psiinon
Copy link
Member

psiinon commented Nov 3, 2022

Hiya @dbartholomae !
Thanks for the PR and this issue - really good feedback.
As you've probably worked out, the ZAP actions have not had much love recently. We are a small core team and have loads to do 😉
I completely agree with the desire for a testing framework - its actually one of the reasons I've been nervous about touching this code as well! I have added an action which runs the baseline scan, and plan to add that to the other actions, but more tests would be really good, esp for this repo.
It would be really great if you could help us out - feel free to carry on the chat here, or contact me directly - I should be easy to find on email / twitter etc. Very happy to have a video call about the actions as well if you like?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants