feat(COR-1639): surface scan git SHA in list output by leenk7991 · Pull Request #123 · Corgea/cli

leenk7991 · 2026-07-13T09:02:27Z

Summary

Add optional git_sha on ScanResponse (defaults when absent) so the CLI can show the commit SHA Doghouse stores for each scan.
Show SHA in corgea list table and --json output.
Resolve git SHA/branch via Repository::discover so scans started from a subdirectory still attribute correctly.
related doghouse PR: https://github.com/Corgea/doghouse/pull/1677

Test plan

./harness check
Unit: ScanResponse deserializes git_sha and defaults when missing
Unit: get_repo_info from a nested subdirectory
Manual: corgea list / corgea list --json against an env that returns git_sha
Manual: run a scan from a repo subdirectory and confirm upload metadata still has SHA

cursor

Stale comment

Reject skip with partial-scan/output flags, case-insensitive complete status, and satisfy clippy::question_mark on CI's Rust 1.97. Co-authored-by: Cursor <cursoragent@cursor.com>

Address RUSTSEC-2026-0194/0195 (quick-xml >=0.41) and RUSTSEC-2026-0204 (crossbeam-epoch >=0.9.20). Update Fortify parser for the quick-xml 0.41 API. Co-authored-by: Cursor <cursoragent@cursor.com>

Ibrahimrahhal

what is the use case here? as this can be confusing --skip-if-scanned may skip scanning because the user is working tree head is already scanned but he have uncommitted changes

leenk7991 · 2026-07-15T08:07:52Z

what is the use case here? as this can be confusing --skip-if-scanned may skip scanning because the user is working tree head is already scanned but he have uncommitted changes

yes that's expected, they mentioned they want to skip the scan if the commite was already scanned in the past 24 hours, maybe for CI reruns?

- API/CLI capability to retrieve the last n scans, including their commit SHAs.

- Based on what is returned we will check if it has been scanned. If scanned within the last 24 hours, skip the scan. - TransUnion - Pending

Keep --skip-if-scanned helpers/tests alongside COR-1647 fail-on malicious gates and COR-1576 wrapper/help UX updates from main. Co-authored-by: Cursor <cursoragent@cursor.com>

Ibrahimrahhal · 2026-07-20T09:38:01Z

yes that's expected, they mentioned they want to skip the scan if the commite was already scanned in the past 24 hours, maybe for CI reruns?

Not sure, still looks not complete use case to me, for example we need to know how we should handle blocking rules. if they had a pipeline that was blocked on a day it will pass the next day if they enabled this flag. (it might not be needed but we need to understand more on how they intend to use it)

…racking

…ty check

Remove the opt-in skip path and unused list filters. Retain git_sha on scan responses/list output, plus get_repo_info discover for subdirectory SHA. Co-authored-by: Cursor <cursoragent@cursor.com>

Co-authored-by: Cursor <cursoragent@cursor.com>

cursor

Production review of the post–--skip-if-scanned surface (SHA list column + Repository::discover in get_repo_info).

Blocking concern: switching get_repo_info from open → discover changes BLAST project attribution for subdirectory CWDs while corgea list still keys off the CWD basename, so scans can land in one project and be invisible to list from the same directory. Related SHA/content mismatch called out inline.

Verified separately: ScanResponse.git_sha is additive with a missing-field default; --json will include it when present; prior skip-path review threads are obsolete after that feature was removed.

_{Sent by Cursor Automation: pr-flow}

juangaitanv

lgtm

* COR-1641: CLI-02: Scan-Level Metadata Tagging * COR-1641: serde skip if none --------- Co-authored-by: Cursor <cursoragent@cursor.com>

COR-1639: CLI-01: Scan Optimization (SHA Tracking)

1c0f266

leenk7991 requested review from Ibrahimrahhal, asadeddin, juangaitanv, tabualhsan and yhoztak July 13, 2026 09:03

cursor Bot reviewed Jul 13, 2026

View reviewed changes

Comment thread src/main.rs Outdated

Comment thread src/scanners/blast.rs Outdated

leenk7991 and others added 2 commits July 13, 2026 12:31

Address PR review: tighten skip-if-scanned guards and fix CI clippy

343bffe

Reject skip with partial-scan/output flags, case-insensitive complete status, and satisfy clippy::question_mark on CI's Rust 1.97. Co-authored-by: Cursor <cursoragent@cursor.com>

Fix cargo audit: bump quick-xml and crossbeam-epoch

69b4022

Address RUSTSEC-2026-0194/0195 (quick-xml >=0.41) and RUSTSEC-2026-0204 (crossbeam-epoch >=0.9.20). Update Fortify parser for the quick-xml 0.41 API. Co-authored-by: Cursor <cursoragent@cursor.com>

leenk7991 mentioned this pull request Jul 13, 2026

COR-1641: CLI-02: Scan-Level Metadata Tagging #124

Merged

Ibrahimrahhal reviewed Jul 14, 2026

View reviewed changes

leenk7991 requested a review from Ibrahimrahhal July 15, 2026 14:31

Merge main into cor-1639-scan-sha-tracking

5b32e6a

Keep --skip-if-scanned helpers/tests alongside COR-1647 fail-on malicious gates and COR-1576 wrapper/help UX updates from main. Co-authored-by: Cursor <cursoragent@cursor.com>

juangaitanv reviewed Jul 17, 2026

View reviewed changes

Comment thread src/scanners/blast.rs Outdated

Comment thread src/scanners/blast.rs Outdated

Comment thread src/scanners/blast.rs Outdated

COR-1639: address comments and other updates

84b4e3d

leenk7991 requested a review from juangaitanv July 19, 2026 07:57

Ibrahimrahhal reviewed Jul 20, 2026

View reviewed changes

Comment thread src/scanners/blast.rs Outdated

Ibrahimrahhal reviewed Jul 20, 2026

View reviewed changes

Comment thread src/scanners/blast.rs Outdated

leenk7991 added 2 commits July 20, 2026 16:53

Merge branch 'main' of github.com:Corgea/cli into cor-1639-scan-sha-t…

0aeab7d

…racking

COR-1639: log error instead of print

016e6d1

leenk7991 requested a review from Ibrahimrahhal July 21, 2026 06:41

juangaitanv reviewed Jul 21, 2026

View reviewed changes

Comment thread src/scanners/blast.rs Outdated

Comment thread src/utils/generic.rs Outdated

COR-1639: use repository discover and include submodule status in dir…

11b78c9

…ty check

leenk7991 requested a review from juangaitanv July 21, 2026 11:23

juangaitanv reviewed Jul 21, 2026

View reviewed changes

Comment thread src/utils/generic.rs

Comment thread src/scanners/blast.rs Outdated

Comment thread src/scanners/blast.rs Outdated

COR-1639: check repo root and other updates

ef6dbdd

leenk7991 requested a review from juangaitanv July 21, 2026 12:51

juangaitanv reviewed Jul 21, 2026

View reviewed changes

Comment thread src/scanners/blast.rs Outdated

Comment thread src/utils/generic.rs Outdated

Comment thread src/scanners/blast.rs Outdated

leenk7991 and others added 2 commits July 22, 2026 12:24

COR-1639: drop --skip-if-scanned; keep scan SHA surfacing

a98e623

Remove the opt-in skip path and unused list filters. Retain git_sha on scan responses/list output, plus get_repo_info discover for subdirectory SHA. Co-authored-by: Cursor <cursoragent@cursor.com>

Merge origin/main into cor-1639-scan-sha-tracking

0bc9e8c

leenk7991 changed the title ~~COR-1639: CLI-01: Scan Optimization (SHA Tracking)~~ feat(COR-1639): surface scan git SHA in list output Jul 22, 2026

chore: drop no-op whitespace from blast scan

1313270

Co-authored-by: Cursor <cursoragent@cursor.com>

leenk7991 requested a review from juangaitanv July 22, 2026 09:28

leenk7991 marked this pull request as draft July 22, 2026 09:28

leenk7991 marked this pull request as ready for review July 22, 2026 09:28

cursor Bot reviewed Jul 22, 2026

View reviewed changes

Comment thread src/utils/generic.rs Outdated

Comment thread src/utils/generic.rs Outdated

Comment thread src/list.rs Outdated

juangaitanv approved these changes Jul 22, 2026

View reviewed changes

leenk7991 and others added 2 commits July 22, 2026 13:53

COR-1639: address comments

18edd71

COR-1641: CLI-02: Scan-Level Metadata Tagging (#124)

d2c3d2c

* COR-1641: CLI-02: Scan-Level Metadata Tagging * COR-1641: serde skip if none --------- Co-authored-by: Cursor <cursoragent@cursor.com>

leenk7991 merged commit bfa2ba5 into main Jul 22, 2026
16 checks passed

Uh oh!

Conversation

leenk7991 commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Test plan

Uh oh!

cursor Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Ibrahimrahhal left a comment

Choose a reason for hiding this comment

Uh oh!

leenk7991 commented Jul 15, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Ibrahimrahhal commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

juangaitanv left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

leenk7991 commented Jul 13, 2026 •

edited

Loading

cursor Bot left a comment •

edited

Loading

Ibrahimrahhal commented Jul 20, 2026 •

edited

Loading