Skip to content

Commit e6b618e

Browse files
elireismanelireisman
authored
Merge pull request #767 from actions/max-comment-length
Fix the max comment length issue
2 parents 8d625cd + 3c42649 commit e6b618e

8 files changed

Lines changed: 201 additions & 71 deletions

File tree

‎__tests__/fixtures/config-allow-sample.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
fail_on_severity: critical
22
allow_licenses:
3-
- "BSD"
4-
- "GPL 2"
3+
- 'BSD'
4+
- 'GPL 2'

‎__tests__/fixtures/inline-license-config-sample.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
allow-licenses: "MIT, GPL-2.0-only"
1+
allow-licenses: 'MIT, GPL-2.0-only'

‎__tests__/summary.test.ts‎

Lines changed: 75 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
import {expect, jest, test} from '@jest/globals'
2-
import {Changes, ConfigurationOptions, Scorecard} from '../src/schemas'
2+
import {Change, Changes, ConfigurationOptions, Scorecard} from '../src/schemas'
33
import * as summary from '../src/summary'
44
import * as core from '@actions/core'
55
import {createTestChange} from './fixtures/create-test-change'
@@ -109,6 +109,80 @@ test('prints headline as h1', () => {
109109
expect(text).toContain('<h1>Dependency Review</h1>')
110110
})
111111

112+
test('returns minimal summary in case the core.summary is too large for a PR comment', () => {
113+
let changes: Changes = [
114+
createTestChange({name: 'lodash', version: '1.2.3'}),
115+
createTestChange({name: 'colors', version: '2.3.4'}),
116+
createTestChange({name: '@foo/bar', version: '*'})
117+
]
118+
119+
let minSummary: string = summary.addSummaryToSummary(
120+
changes,
121+
emptyInvalidLicenseChanges,
122+
emptyChanges,
123+
scorecard,
124+
defaultConfig
125+
)
126+
127+
// side effect DR report into core.summary as happens in main.ts
128+
summary.addScannedDependencies(changes)
129+
const text = core.summary.stringify()
130+
131+
expect(text).toContain('<h1>Dependency Review</h1>')
132+
expect(minSummary).toContain('# Dependency Review')
133+
134+
expect(text).toContain('❌ 3 vulnerable package(s)')
135+
expect(text).not.toContain('* ❌ 3 vulnerable package(s)')
136+
expect(text).toContain('lodash')
137+
expect(text).toContain('colors')
138+
expect(text).toContain('@foo/bar')
139+
140+
expect(minSummary).toContain('* ❌ 3 vulnerable package(s)')
141+
expect(minSummary).not.toContain('lodash')
142+
expect(minSummary).not.toContain('colors')
143+
expect(minSummary).not.toContain('@foo/bar')
144+
145+
expect(text.length).toBeGreaterThan(minSummary.length)
146+
})
147+
148+
test('returns minimal summary formatted for posting as a PR comment', () => {
149+
const OLD_ENV = process.env
150+
151+
let changes: Changes = [
152+
createTestChange({name: 'lodash', version: '1.2.3'}),
153+
createTestChange({name: 'colors', version: '2.3.4'}),
154+
createTestChange({name: '@foo/bar', version: '*'})
155+
]
156+
157+
process.env.GITHUB_SERVER_URL = 'https://github.com'
158+
process.env.GITHUB_REPOSITORY = 'owner/repo'
159+
process.env.GITHUB_RUN_ID = 'abc-123-xyz'
160+
161+
let minSummary: string = summary.addSummaryToSummary(
162+
changes,
163+
emptyInvalidLicenseChanges,
164+
emptyChanges,
165+
scorecard,
166+
defaultConfig
167+
)
168+
169+
process.env = OLD_ENV
170+
171+
// note: no Actions context values in unit test env
172+
const expected = `
173+
# Dependency Review
174+
The following issues were found:
175+
* ❌ 3 vulnerable package(s)
176+
* ✅ 0 package(s) with incompatible licenses
177+
* ✅ 0 package(s) with invalid SPDX license definitions
178+
* ✅ 0 package(s) with unknown licenses.
179+
180+
[View full job summary](https://github.com/owner/repo/actions/runs/abc-123-xyz)
181+
`.trim()
182+
183+
expect(minSummary).toEqual(expected)
184+
})
185+
112186
test('only includes "No vulnerabilities or license issues found"-message if both are configured and nothing was found', () => {
113187
summary.addSummaryToSummary(
114188
emptyChanges,

‎dist/index.js‎

Lines changed: 38 additions & 15 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎dist/index.js.map‎

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎src/comment-pr.ts‎

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,8 @@ import * as retry from '@octokit/plugin-retry'
55
import {RequestError} from '@octokit/request-error'
66
import {ConfigurationOptions} from './schemas'
77

8+
export const MAX_COMMENT_LENGTH = 65536
9+
810
const retryingOctokit = githubUtils.GitHub.plugin(retry.retry)
911
const octo = new retryingOctokit(
1012
githubUtils.getOctokitOptions(core.getInput('repo-token', {required: true}))
@@ -14,13 +16,9 @@ const octo = new retryingOctokit(
1416
const COMMENT_MARKER = '<!-- dependency-review-pr-comment-marker -->'
1517

1618
export async function commentPr(
17-
summary: typeof core.summary,
19+
commentContent: string,
1820
config: ConfigurationOptions
1921
): Promise<void> {
20-
const commentContent = summary.stringify()
21-
22-
core.setOutput('comment-content', commentContent)
23-
2422
if (
2523
!(
2624
config.comment_summary_in_pr === 'always' ||

‎src/main.ts‎

Lines changed: 17 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ import * as summary from './summary'
2222
import {getRefs} from './git-refs'
2323

2424
import {groupDependenciesByManifest} from './utils'
25-
import {commentPr} from './comment-pr'
25+
import {commentPr, MAX_COMMENT_LENGTH} from './comment-pr'
2626
import {getDeniedChanges} from './deny'
2727

2828
async function delay(ms: number): Promise<void> {
@@ -127,7 +127,7 @@ async function run(): Promise<void> {
127127

128128
const scorecard = await getScorecardLevels(filteredChanges)
129129

130-
summary.addSummaryToSummary(
130+
const minSummary = summary.addSummaryToSummary(
131131
vulnerableChanges,
132132
invalidLicenseChanges,
133133
deniedChanges,
@@ -166,7 +166,21 @@ async function run(): Promise<void> {
166166
core.setOutput('dependency-changes', JSON.stringify(changes))
167167
summary.addScannedDependencies(changes)
168168
printScannedDependencies(changes)
169-
await commentPr(core.summary, config)
169+
170+
// include full summary in output; Actions will truncate if oversized
171+
let rendered = core.summary.stringify()
172+
core.setOutput('comment-content', rendered)
173+
174+
// if the summary is oversized, replace with minimal version
175+
if (rendered.length >= MAX_COMMENT_LENGTH) {
176+
core.debug(
177+
'The comment was too big for the GitHub API. Falling back on a minimum comment'
178+
)
179+
rendered = minSummary
180+
}
181+
182+
// update the PR comment if needed with the right-sized summary
183+
await commentPr(rendered, config)
170184
} catch (error) {
171185
if (error instanceof RequestError && error.status === 404) {
172186
core.setFailed(

0 commit comments

Comments
 (0)