carlspring / carlspring/mend-actions
Fix the last leaf in the dependency graph issue
- Dominant language
- Python
- Stars
- 1
- Forks
- 1
- PR merge metrics
- No merged PRs in 30d
Description
# Task Description
There appears to be a bug in the way the dependency tree.

As can be seen, the last element is not formatter properly. This is only happening in the Code Scanning issue, because when consuming the SARIF report GHAS does not handle Markdown properly. This is actually prefixed by spaces correctly in the build log, as can be seen here:

Most-likely, this will need to be escaped using `&nsbp;`-s in the SARIF. The fix should NOT break it when printing to the console.
# Open Questions
# Notes
# Task List
The following tasks will need to be carried out:
* [ ] Investigate the issue.
* [ ] Provide a solution.
* [ ] Test the fix.
* [ ] Update the documentation.
# Task Relationships
This task:
* Is a sub-task of:
* Depends on:
* Is a follow-up of:
* Relates to:
# Resources
# Useful Links
# Points of Contact
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the dependency-tree output and SARIF generation paths, then reproduce the final-leaf formatting difference shown in the issue. Verify any change against both SARIF consumed by Code Scanning and the console build-log output; done means the leaf renders correctly in Code Scanning without changing console formatting.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100