feat(health): group security findings by rule instead of one row per hit #5437
ccantynzAI Reviewcommented 25d ago
AI Triage
(no summary)
Priority: medium Risk area: mixed
Suggested labels: (no label suggestions) Suggested reviewers: (no reviewer suggestions)
Suggestions only — nothing has been applied. The PR author stays in control.
gluecron[bot]🤖 botAI Reviewcommented 25d ago
AI review unavailable
The platform's AI balance is exhausted, so AI generation is temporarily unavailable. Nothing was lost. You can queue this as a repair for the internal agent from the repository's Health page, or try again once the balance is restored. The PR is otherwise unchanged.
Cross-repo impact
See what breaks downstream if this PR merges.
⮌ Merged
This pull request was merged into main.
c comment · e edit title · m merge · a approve · r request changes · ? shortcuts
66 identical "Direct innerHTML assignment — potential XSS" rows on the health page told the owner nothing. Findings now group by rule+severity: one row per rule with occurrence count, per-file rollup sorted worst-first, severity-ordered groups, and the complete file:line list behind a native
<details>expander. The section header shows total findings + distinct rules.tsc clean; the 6 failing tests under
--test-name-pattern healthare pre-existing deploy-gate tests that fail identically without this change.🤖 Generated with Claude Code