Open
Description
Currently we use the HTML and JSON outputs to present check result justifications to users. But that has several limitations, e.g., we only show the first entry for a check result justification only.
Moreover, while the verify-command
can be very handy to enforce a policy, it is hard to know why certain checks have failed.
It would be nice to have a new sub-command like get-result-details
, where we run some useful SQL queries to dump the result in a machine readable format, e.g.,
sqlite3 -json output/macaron.db "SELECT * FROM github_actions_vulnerabilities_check;" | jq