gh-gei icon indicating copy to clipboard operation
gh-gei copied to clipboard

Include original resolver name in migrated Secret Scanning alerts

Open theztefan opened this issue 8 months ago • 0 comments

Description

When using the gh gei migrate-secret-alerts to migrate alerts, the resolution comments from the source alert are also mapped over to the target alerts. Which works fine but can be further improved to include the original resolver name into the comment. The reason for this is because typicall the gh gei migrate-secret-alerts in migrations is run with tokens generated by GitHub Apps therefore the resolver in the target alert is a tool therefore we are losing the useful information of who originally closed an alert.

Example

Source alert resolution comment:

Image

After migrating it with a workflow that uses GitHub App to generate tokens, the target alert does not show @theztefan as closer by rather ghas-control[bot].

Image

Proposed improvement

This result expected and not a bug! The suggestion is to also transfer the resolver name as part of the comment in the target alert. So the result in the example above would be ghas-control[bot] closed this with a comment @theztefan: Revoked today.

theztefan avatar Apr 25 '25 10:04 theztefan