From 34c1f97468de7be0c9729b446ccf89f57c634413 Mon Sep 17 00:00:00 2001 From: Eran Turgeman Date: Wed, 2 Jul 2025 16:26:52 +0300 Subject: [PATCH] information for the task --- scanpullrequest/scanpullrequest.go | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/scanpullrequest/scanpullrequest.go b/scanpullrequest/scanpullrequest.go index 81a702596..294e63b69 100644 --- a/scanpullrequest/scanpullrequest.go +++ b/scanpullrequest/scanpullrequest.go @@ -164,6 +164,13 @@ func auditPullRequestAndReport(repoConfig *utils.Repository, client vcsclient.Vc ) } }() + /* TODO eran + we need to insert somewhere the following logic: + If in app-context, call Evaluation API somewhere and get the 'missing_data' that indicates the missing scans (for the relevant msi). + those missing scans must be performed and they are overriding CC, frogbot-apps, or any other source that can decide which scans we run + After the scans are completed (must be completed) we call the Evaluation api again to get the Allow/Deny status and act accordingly with the fail logic. + */ + // Audit PR code issuesCollection, err = auditPullRequestCode(repoConfig, scanDetails, sourceBranchWd, targetBranchWd) return