27835384216
65%

Ran 19 Jun 2026 03:50PM UTC

Jobs 1

Files 40

Run time 1min

Badge

Embed ▾

Committed 19 Jun 2026 03:46PM UTC coverage: 64.626%. Remained the same

Build # 27835384216

Build Type

push

github

Committed by

web-flow

Commit Message

feat(ci): add govulncheck CVE detection workflow for PR checks (#3557)

* feat(ci): add govulncheck CVE detection workflow for PR checks

Signed-off-by: Shilpa Chugh <shchugh@redhat.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix(ci): address review feedback for govulncheck workflow

- Fix jq filter bug: use $f.osv instead of .finding.osv after group_by
  (context is the group array, not an individual finding)
- Fix script injection: pass new_cves via env vars instead of direct
  ${{ }} interpolation in JS template literals and shell heredocs
- Fix workflow_dispatch: add fallbacks for concurrency group and base
  branch ref, gate PR comment steps on pull_request event
- Add fork gate to skip workflow on fork PRs
- Add set -eo pipefail to compare step for robust error handling
- Assert non-empty scan output before diffing to catch truncated scans
- Paginate listComments calls to handle PRs with many comments
- Add fallback warning when security comment deletion fails

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Shilpa Chugh <shchugh@redhat.com>

---------

Signed-off-by: Shilpa Chugh <shchugh@redhat.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Coverage Stats

2333 of 3610 relevant lines covered (64.63%)

0.75 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	27835384216.1	19 Jun 2026 03:50PM UTC	40	64.63	GitHub Action Run

kubeflow / trainer / 27835384216
65%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 27835384216

kubeflow / trainer / 27835384216 65%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 27835384216

kubeflow / trainer / 27835384216
65%

README BADGES
x