carlspring / carlspring/mend-actions

Fix the last leaf in the dependency graph issue

Open
#13 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
1
Forks
1
PR merge metrics
No merged PRs in 30d

Description

# Task Description

There appears to be a bug in the way the dependency tree.

![Image](https://github.com/user-attachments/assets/7b27e8eb-9a3d-48a8-bbd3-97f21444aee3)

As can be seen, the last element is not formatter properly. This is only happening in the Code Scanning issue, because when consuming the SARIF report GHAS does not handle Markdown properly. This is actually prefixed by spaces correctly in the build log, as can be seen here:

![Image](https://github.com/user-attachments/assets/9e589369-b570-4fdb-babf-2e43993072df)

Most-likely, this will need to be escaped using `&nsbp;`-s in the SARIF. The fix should NOT break it when printing to the console.

# Open Questions

# Notes

# Task List

The following tasks will need to be carried out:
* [ ] Investigate the issue.
* [ ] Provide a solution.
* [ ] Test the fix.
* [ ] Update the documentation.

# Task Relationships

This task:
* Is a sub-task of:
* Depends on:
* Is a follow-up of:
* Relates to:

# Resources

# Useful Links

# Points of Contact

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the dependency-tree output and SARIF generation paths, then reproduce the final-leaf formatting difference shown in the issue. Verify any change against both SARIF consumed by Code Scanning and the console build-log output; done means the leaf renders correctly in Code Scanning without changing console formatting.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.