diff --git a/pkg/buildClient/comments.go b/pkg/buildClient/comments.go
index 9ccfbcb7..8c80504b 100644
--- a/pkg/buildClient/comments.go
+++ b/pkg/buildClient/comments.go
@@ -68,25 +68,25 @@ func prComments(buildSystem string, result []*buildsecurity.Result) error {
}
func returnSecretMsg(r *buildsecurity.Result) string {
- return fmt.Sprintf("### :warning: Aqua found issue"+
- "\nCATEGORY: %s "+
- "\nDESCRIPTION: %s "+
- "\nSEVERITY: %s "+
- "\nMATCH: %s",
+ return fmt.Sprintf("### :warning: Aqua detected sensitive data in your code"+
+ "\nCategory: %s "+
+ "\nDescription: %s "+
+ "\nSeverity: %s "+
+ "\nMatch: %s",
r.Resource,
r.Title,
- r.Severity.String(),
+ strings.ReplaceAll(r.Severity.String(), "SEVERITY_", ""),
r.Message)
}
func returnMisconfMsg(r *buildsecurity.Result) string {
- return fmt.Sprintf("### :warning: Aqua found issue "+
- "\nMISCONF ID: %s "+
- "\nCHECK: %s "+
- "\nSEVERITY: %s "+
- "\nMESSAGE: %s",
+ return fmt.Sprintf("### :warning: Aqua detected misconfiguration in your code"+
+ "\nMisconfiguration ID: %s "+
+ "\nCheck Name: %s "+
+ "\nSeverity: %s "+
+ "\nMessage: %s",
r.AVDID,
r.Title,
- r.Severity.String(),
+ strings.ReplaceAll(r.Severity.String(), "SEVERITY_", ""),
r.Message)
}
@@ -104,7 +104,7 @@ func getGitHubRepositoryDetails() (owner, repo string, err error) {
// extractGitHubActionPrNumber take the pull request number from the GitHub action run
func extractGitHubActionPrNumber() (int, error) {
- githubEventFile := "/github/workflow/event.json"
+ githubEventFile := os.Getenv("GITHUB_EVENT_PATH")
file, err := ioutil.ReadFile(githubEventFile)
if err != nil {
return 0, fmt.Errorf("failed gitHub event payload not found in %s", githubEventFile)
diff --git a/pkg/buildClient/upload.go b/pkg/buildClient/upload.go
index 50e10303..60b4cca2 100644
--- a/pkg/buildClient/upload.go
+++ b/pkg/buildClient/upload.go
@@ -51,7 +51,7 @@ func (bc *TwirpClient) Upload(results []*buildsecurity.Result, tags map[string]s
}
// Send pull request comments
- if triggeredBy == "pr" && len(results) > 0 {
+ if triggeredBy == "PR" && len(results) > 0 {
err = prComments(buildSystem, results)
if err != nil {
log.Logger.Info("failed send PR comment logging and continue the scan err: ", err)