Skip to content

RFP.2.2 demo: severity gate — blocks on Critical & High#2

Open
dave-apisec wants to merge 10 commits into
developfrom
demo/scan-block-high
Open

RFP.2.2 demo: severity gate — blocks on Critical & High#2
dave-apisec wants to merge 10 commits into
developfrom
demo/scan-block-high

Conversation

@dave-apisec

@dave-apisec dave-apisec commented Jun 9, 2026

Copy link
Copy Markdown
Owner

What this demonstrates

RFP.2.1 + RFP.2.2 — Scan triggered on PR with a hard severity gate.

  • Runner: ephemeral ubuntu-latest GitHub-hosted VM
  • Credential handling: APISEC_TOKEN as GitHub Secret, APISEC_AUTH_ID as GitHub Variable
  • Runs docker.io/apisec/apisec-scan-and-gate:latest container
  • APISEC_MAX_CRITICAL=0 and APISEC_MAX_HIGH=0 — any Critical or High finding exits non-zero
  • Non-zero exit → step fails → PR check fails → merge button locked

Expected result: ❌ Check fails (crAPI has known High/Critical findings). PR comment shows BLOCKED status with a direct link to the scan in APIsec.

@dave-apisec
demo: add APIsec scan with High severity gate (pipeline blocking)
a765b93 
Demonstrates RFP.2.1 + RFP.2.2 — PR-triggered scan, runner isolation,
secret-based credential handling, and severity gating:
  - APISEC_MAX_HIGH: "0"  → any High finding blocks the PR
  - Medium advisory runs with continue-on-error (warns, does not block)
@dave-apisec
demo: simplify gate to Critical & High only (remove Medium advisory)
34671b2 
Tightens RFP.2.2 demo to a single blocking step: APISEC_MAX_CRITICAL=0
and APISEC_MAX_HIGH=0. Container exits non-zero on any Critical or High
finding, which fails the check and prevents merge.
@dave-apisec
demo: capture scan ID from container output and add clickable APIsec …
b18e4bf 
…URL to PR comment
@github-actions

github-actions Bot commented Jun 9, 2026

Copy link
Copy Markdown

APIsec API Security Scan

Severity Gate Result
🔴 Critical / High (blocking) ❌ BLOCKED — resolve findings before merging

View scan results in APIsec →

This PR is blocked from merging. Resolve all Critical and High severity findings and re-run the scan.

@github-actions

github-actions Bot commented Jun 9, 2026

Copy link
Copy Markdown

APIsec API Security Scan

Severity Gate Result
🔴 Critical / High (blocking) ❌ BLOCKED — resolve findings before merging

View scan results in APIsec →

This PR is blocked from merging. Resolve all Critical and High severity findings and re-run the scan.

1 similar comment
@github-actions

github-actions Bot commented Jun 9, 2026

Copy link
Copy Markdown

APIsec API Security Scan

Severity Gate Result
🔴 Critical / High (blocking) ❌ BLOCKED — resolve findings before merging

View scan results in APIsec →

This PR is blocked from merging. Resolve all Critical and High severity findings and re-run the scan.

@github-actions

github-actions Bot commented Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown

☂️ Python Coverage

current status: ✅

Overall Coverage

Lines Covered Coverage Threshold Status
1363 1089 80% 0% 🟢

New Files

No new covered files...

Modified Files

No covered modified files...

updated for commit: db3e5b8 by action🐍

@github-actions

github-actions Bot commented Jun 9, 2026

Copy link
Copy Markdown

APIsec API Security Scan

Severity Gate Result
🔴 Critical / High (blocking) ❌ BLOCKED — resolve findings before merging

View scan results in APIsec →

This PR is blocked from merging. Resolve all Critical and High severity findings and re-run the scan.

@github-actions

github-actions Bot commented Jun 9, 2026

Copy link
Copy Markdown

APIsec API Security Scan

Severity Gate Result
🔴 Critical / High (blocking) ❌ BLOCKED — resolve findings before merging

View scan results in APIsec →

This PR is blocked from merging. Resolve all Critical and High severity findings and re-run the scan.

@github-actions

github-actions Bot commented Jun 9, 2026

Copy link
Copy Markdown

APIsec API Security Scan

Severity Gate Result
🔴 Critical / High (blocking) ❌ BLOCKED — resolve findings before merging

View scan results in APIsec →

This PR is blocked from merging. Resolve all Critical and High severity findings and re-run the scan.

@github-actions

github-actions Bot commented Jun 9, 2026

Copy link
Copy Markdown

APIsec API Security Scan

Severity Gate Result
🔴 Critical / High (blocking) ❌ BLOCKED — resolve findings before merging

View scan results in APIsec →

This PR is blocked from merging. Resolve all Critical and High severity findings and re-run the scan.

@github-actions

github-actions Bot commented Jun 9, 2026

Copy link
Copy Markdown

APIsec API Security Scan

Severity Gate Result
🔴 Critical / High (blocking) ❌ BLOCKED — resolve findings before merging

View scan results in APIsec →

This PR is blocked from merging. Resolve all Critical and High severity findings and re-run the scan.

@github-actions

github-actions Bot commented Jun 16, 2026

Copy link
Copy Markdown

APIsec API Security Scan

Severity Gate Result
🔴 Critical / High (blocking) ❌ BLOCKED — resolve findings before merging

View scan results in APIsec →

This PR is blocked from merging. Resolve all Critical and High severity findings and re-run the scan.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dave-apisec