mindersec / minder

Software Supply Chain Security Platform
https://minder-docs.stacklok.dev/
Apache License 2.0
294 stars 42 forks source link

Pull request alert types #5024

Open eleftherias opened 4 days ago

eleftherias commented 4 days ago

User Story Description

As a Minder rule author I want to write a rule that comments on a pull request if there is an evaluation failure so that I can alert the PR author in the environment they are already using

Background

We already have existing ruletypes that comment on pull requests (e.g trusty and OSV), but there is nothing in the ruletype definition that explicitly states that commenting will be the action taken if the PR is not compliant.

Furthermore, the logic to comment on a PR is internal to Minder and not available to be reused by external authors of new ruletypes.

Acceptance Criteria

Additional Resources

No response

Tasks