@hookwarden/pr-renderer
Advanced tools
Markdown PR-comment renderer for hookwarden. Single source of truth for the sticky-comment shape used by the public GitHub Action and the SaaS continuous-scanning worker.
Markdown PR-comment renderer for hookwarden.
This package is the single source of truth for the sticky-comment shape used by both:
@hookwarden/github-action), which posts comments on the user's own PRs from CLI scan output, andKeeping the renderer in one place means the de-duplication key the bot uses to find its own prior comments — STICKY_MARKER = "<!-- hookwarden:pr-summary -->" — is byte-identical across both consumers. A CLI-Action comment and a SaaS comment on the same PR collide on the same marker and the bot edits in place rather than posting duplicates.
Do not edit STICKY_MARKER without coordinating with the plan-grep gate that enforces its exact spelling in CI.
renderSummaryBody(input) — produces the sticky markdown bodySTICKY_MARKER / CLEAN_BODY / BOT_LOGIN — byte-locked literalsScanFinding / ScanFindingLocation — the finding shape the renderer acceptsApache-2.0.
FAQs
Markdown PR-comment renderer for hookwarden. Single source of truth for the sticky-comment shape used by the public GitHub Action and the SaaS continuous-scanning worker.
We found that @hookwarden/pr-renderer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.
Research
/Security News
Thirteen malicious Packagist themes expose visitors on unpatched iPhones to a WebKit-to-kernel exploit chain that steals device data and wallet seeds.
Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.