Conversation
DE-57584: Configure GHA for Black Duck scanning.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
Opened against wrong repo by mistake, closing. |
|
Caution Review failedThe pull request is closed. ℹ️ Recent review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (3)
📝 WalkthroughWalkthroughThis PR adds a BlackDuck security scanning workflow triggered monthly and on pushes to the master branch, updates the README title to reference PHP 8.4 preparation, and changes the Composer package identifier from Changes
Estimated code review effort🎯 2 (Simple) | ⏱️ ~8 minutes Poem
Important Merge conflicts detected (Beta)
✨ Finishing Touches🧪 Generate unit tests (beta)
📝 Coding Plan
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment Tip CodeRabbit can use your project's `phpmd` ruleset to improve the quality of PHP code reviews.You can customize the |
There was a problem hiding this comment.
Pull request overview
This PR appears to be a “trigger test”/prep PR, but it currently introduces repo/package identity changes (Composer package name + README title) and adds a new scheduled Black Duck scanning workflow.
Changes:
- Renames the Composer package from
ruflin/elasticatobrandembassy/elastica. - Updates the README title to mention “PHP 8.4 preparation”.
- Adds a GitHub Actions workflow to run Synopsys Black Duck scans on
masterpushes and on a monthly schedule.
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 4 comments.
| File | Description |
|---|---|
| composer.json | Changes the published Composer package name (potentially breaking for consumers). |
| README.md | Updates the project title; other content still references ruflin/Elastica. |
| .github/workflows/blackduck.yaml | Introduces a new Black Duck scan workflow (push/scheduled triggers). |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| @@ -1,5 +1,5 @@ | |||
| { | |||
| "name": "ruflin/elastica", | |||
| "name": "brandembassy/elastica", | |||
There was a problem hiding this comment.
Changing the Composer package name from "ruflin/elastica" to "brandembassy/elastica" is a breaking change for downstream consumers (install/upgrade paths, Packagist metadata, and any references in docs/CI). If this repo is intended to remain a fork, consider keeping the original package name (or clearly documenting the new install name and ensuring the old name is not referenced elsewhere).
| "name": "brandembassy/elastica", | |
| "name": "ruflin/elastica", |
| Elastica: elasticsearch PHP Client - PHP 8.4 preparation | ||
| ========================================================= | ||
|
|
||
| [](https://packagist.org/packages/ruflin/elastica) | ||
| [](http://travis-ci.org/ruflin/Elastica) |
There was a problem hiding this comment.
The README title now claims "PHP 8.4 preparation", but the document (badges/links and the compatibility table) still points to ruflin/Elastica and indicates PHP ^7.0 support. This is misleading; either update the related links/compatibility info to match the new package/repo direction or remove the PHP 8.4 note until the actual compatibility work lands.
| on: | ||
| push: | ||
| branches: | ||
| - master | ||
| schedule: | ||
| # Execute at 00:00 on 1st day of every month | ||
| - cron: '0 0 1 * *' |
There was a problem hiding this comment.
The PR description mentions verifying which CI pipelines are triggered on PRs, but this workflow only runs on push to master and on a schedule. If you need PR validation/trigger testing, add a pull_request and/or workflow_dispatch trigger (keeping secrets usage in mind for PR runs).
| blackduck: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@v2 |
There was a problem hiding this comment.
actions/checkout@v2 is quite old and may hit GitHub Actions runtime deprecations (Node runtime updates) sooner than newer major versions. Consider upgrading to actions/checkout@v4 to reduce the chance of workflow breakage and to stay aligned with current GitHub-recommended versions.
| - uses: actions/checkout@v2 | |
| - uses: actions/checkout@v4 |
Description: Prepare BrandEmbassy/Elastica for PHP 8.4 compatibility
Possible impact: CI pipeline, PHP version compatibility
Summary
🤖 Generated with Claude Code
Summary by CodeRabbit
Release Notes
Documentation
Chores