Skip to content

feat: add reusable Mend code scan workflow - #52

Closed
esolitos wants to merge 1 commit into
mainfrom
marlon/feat/add-mend-scan-workflow
Closed

feat: add reusable Mend code scan workflow#52
esolitos wants to merge 1 commit into
mainfrom
marlon/feat/add-mend-scan-workflow

Conversation

@esolitos

@esolitos esolitos commented Nov 7, 2025

Copy link
Copy Markdown
Contributor

No description provided.

@esolitos
esolitos requested review from Copilot and oyving November 7, 2025 14:04

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR introduces a reusable GitHub Actions workflow for Mend security scanning that supports three types of scans: Static Application Security Testing (SAST), Software Composition Analysis (SCA), and container image scanning.

Key Changes:

  • Implements a reusable workflow with configurable scan types (SAST, SCA, image)
  • Adds parallel image scanning capability with matrix strategy
  • Provides detailed exit code handling and GitHub Actions job summaries for scan results

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/workflows/mend.yml
Comment thread .github/workflows/mend.yml Outdated
refactor(workflows): replace code scan with unified mend scan workflow
Apply suggestion from @Copilot

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
@esolitos
esolitos force-pushed the marlon/feat/add-mend-scan-workflow branch from 1e78257 to 5d2332a Compare November 7, 2025 14:23
@esolitos
esolitos removed the request for review from oyving November 10, 2025 14:23
@esolitos esolitos closed this Nov 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants