Skip to content

FoD: Implementation of fod action run gitlab-pr-comment with similar behaviour to github-pr-comment.#1034

Open
kadraman wants to merge 2 commits into
fortify:dev/v3.xfrom
kadraman:fod-gitlab-pr-summary
Open

FoD: Implementation of fod action run gitlab-pr-comment with similar behaviour to github-pr-comment.#1034
kadraman wants to merge 2 commits into
fortify:dev/v3.xfrom
kadraman:fod-gitlab-pr-summary

Conversation

@kadraman

@kadraman kadraman commented Jun 11, 2026

Copy link
Copy Markdown
Contributor

As per title. I have used consistent name gitlab-pr-comment even though it is a MR in GitLab so fod action run ci should hopefully pick it up. There equivalent of GITHUB_TOKEN in GitLab is CI_JOB_TOKEN but this only has read permission to MRs so the user need to specifically create a GITLAB_TOKEN (or GITLAB_API_TOKEN) with permission for this to work.

An example of run:

image

No equivalent for SSC has been created yet.

Copilot AI review requested due to automatic review settings June 11, 2026 09:27

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a new FoD CI action template that posts FoD vulnerability delta summaries as GitLab Merge Request comments/notes, mirroring the existing github-pr-comment behavior so fod action run ci can pick it up in GitLab CI contexts.

Changes:

  • Introduces new gitlab-pr-comment action YAML for posting MR notes via GitLab API.
  • Adds CLI options for GitLab API URL, token, project id, and MR IID with GitLab CI environment-variable defaults.
  • Implements issue delta rendering (new/re-introduced vs removed) and a --dryrun mode.

@kadraman kadraman changed the title Implementation of gitlab-pr-comment action with similar behaviour to github-pr-comment for FoD. FoD: Implementation of fod action run gitlab-pr-comment with similar behaviour to github-pr-comment. Jun 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants