Skip to content

Fix inactive findings displayed when --sync is enabled - #37

Merged
Nitr4x merged 15 commits into
mainfrom
copilot/fix-inactive-findings-display
Apr 16, 2026
Merged

Nitr4x merged 15 commits into
mainfrom
copilot/fix-inactive-findings-display

Conversation

Copilot AI commented Apr 16, 2026 •

Copy link
Copy Markdown
Contributor
  • Remove vulnId from ComputeFindingHash in domains/models/finding.go
  • Add UniqueIdFromTool to connectors/defectdojo/dto.go Finding struct
  • opengrep/service.go: inject hash into extra.fingerprint in enrichOpenGrepResults, update hash call in LoadFindings
  • grype/service.go: update ComputeFindingHash call in LoadFindings
  • kics/service.go: update ComputeFindingHash call in LoadFindings
  • features/sync/sync.go: collapse FilterByActiveFindings to two uniform strategies
  • Update features/sync/sync_test.go tests
  • Update opengrep/service_test.go enrichment tests (fingerprint injection)
  • All tests pass

Copilot AI changed the title [WIP] Fix issue with inactive findings being displayed Fix inactive findings displayed when --sync is enabled Apr 16, 2026
Copilot AI requested a review from Nitr4x April 16, 2026 09:26
…Findings to hash-based matching via vulnerability_ids

Agent-Logs-Url: https://github.com/ParanoiHack/ScopeGuardian/sessions/1b3b00ae-d8f6-410f-9281-12128e500680

Co-authored-by: Nitr4x <10544300+Nitr4x@users.noreply.github.com>
- Remove vulnId from ComputeFindingHash; hash is now severity|file|line|recommendation
- Add UniqueIdFromTool to defectdojo.Finding DTO
- enrichOpenGrepResults: inject content hash into extra.fingerprint (DD maps to unique_id_from_tool) instead of check_id into extra.metadata.cve
- FilterByActiveFindings: strategy 1 = hash-from-fields (covers Grype/KICS), strategy 2 = UniqueIdFromTool direct match (covers OpenGrep)
- Update all tests accordingly

Agent-Logs-Url: https://github.com/ParanoiHack/ScopeGuardian/sessions/d13f99a6-362a-4761-b0b3-35a733ebf74a

Co-authored-by: Nitr4x <10544300+Nitr4x@users.noreply.github.com>
@Nitr4x
Nitr4x marked this pull request as ready for review April 16, 2026 18:38
@Nitr4x
Nitr4x merged commit a38f193 into main Apr 16, 2026
4 of 5 checks passed
@Nitr4x
Nitr4x deleted the copilot/fix-inactive-findings-display branch April 16, 2026 18:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug] Inactive findings are still retrieved and displayed

2 participants