27814286341
65%
master: 68%

Ran 19 Jun 2026 08:24AM UTC

Jobs 1

Files 40

Run time 1min

Badge

Embed ▾

Committed 19 Jun 2026 08:16AM UTC coverage: 64.709% (+0.08%) from 64.626%

Build # 27814286341

Build Type

Pull #3557

github

Committed by

ChughShilpa

Commit Message

fix(ci): address review feedback for govulncheck workflow

- Fix jq filter bug: use $f.osv instead of .finding.osv after group_by
  (context is the group array, not an individual finding)
- Fix script injection: pass new_cves via env vars instead of direct
  ${{ }} interpolation in JS template literals and shell heredocs
- Fix workflow_dispatch: add fallbacks for concurrency group and base
  branch ref, gate PR comment steps on pull_request event
- Add fork gate to skip workflow on fork PRs
- Add set -eo pipefail to compare step for robust error handling
- Assert non-empty scan output before diffing to catch truncated scans
- Paginate listComments calls to handle PRs with many comments
- Add fallback warning when security comment deletion fails

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Shilpa Chugh <shchugh@redhat.com>

Pull Request Pull Request #3557: feat(ci): add govulncheck CVE detection workflow for PR checks

Coverage Stats

2336 of 3610 relevant lines covered (64.71%)

0.75 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	27814286341.1	19 Jun 2026 08:24AM UTC	40	64.71	GitHub Action Run

kubeflow / trainer / 27814286341
65%
master: 68%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 27814286341

kubeflow / trainer / 27814286341 65% master: 68%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 27814286341

kubeflow / trainer / 27814286341
65%
master: 68%

README BADGES
x