Skip to content

Preserve assessment time and checker identity in CSV reports - #16

Merged
CompleteDotTech merged 1 commit into
mainfrom
fix/audit-15-csv-provenance
Oct 26, 2026
Merged

CompleteDotTech merged 1 commit into
mainfrom
fix/audit-15-csv-provenance

Conversation

@CompleteDotTech

Copy link
Copy Markdown
Contributor

Fixes #15

Standalone CSV results and zero-result summaries previously lost checker identity and assessment time already present in JSON/HTML. Capture one UTC assessment timestamp for the run, retain it after interruption, and project tool/name/version/time into every CSV row. Rendering accepts an injected timestamp so all formats can represent the same instant. Rule dates and unknown evidence-collection time remain distinct; advisory classifications and exploitability=not_tested are unchanged.

Validation: safely reproduced missing CSV fields on current main; 36 offline synthetic tests pass, including four new regression tests for consistent formats/multiple rows, empty summaries, interrupted runs, metadata precedence and formula protection. CLI help, checksum and git diff --check pass. README/reference/implementation/example are aligned. No network scans, package execution or deployment. Hosted Copilot review and exact-head CI are required before merge.

Copy link
Copy Markdown
Contributor Author

Exact-head validation: signed e450b263133643ba1424ccaf419a201dee21a0cb passed all 12 hosted push/PR matrix jobs (Python 3.10/3.14 on Ubuntu, Windows and macOS), plus 36 local synthetic tests and CLI/help/checksum/whitespace checks.

Hosted Copilot gate remains unsatisfied. The documented copilot-pull-request-reviewer[bot] request was made through the GitHub connector and retried with REST; both returned success, but requested reviewers remain empty, no review_requested timeline event exists, and completed reviews/inline discussions are empty on readback. Time was allowed for asynchronous completion; silence is not approval. This PR remains unmerged pending a completed exact-head hosted review. No issue closure is claimed.

@CompleteDotTech
CompleteDotTech merged commit a093f9d into main Oct 26, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[P2] Preserve assessment time and checker identity in CSV reports

1 participant