diff --git a/surface/sca/management/commands/renovate_dependencies.py b/surface/sca/management/commands/renovate_dependencies.py index e24dc0d1..42a4b2ce 100644 --- a/surface/sca/management/commands/renovate_dependencies.py +++ b/surface/sca/management/commands/renovate_dependencies.py @@ -30,7 +30,7 @@ def handle(self, *args, **options): platform = platforms.pop() repo_urls = [self.parse_git_url(url)[1] for url in git_urls] - temp_config_path = self.create_temp_renovate_config(repo_urls, dependencies, is_local) + temp_config_path = self.create_temp_renovate_config(repo_urls, dependencies, is_local, platform) try: result = self.run_docker(platform, temp_config_path, is_local) if not result: @@ -46,7 +46,7 @@ def parse_git_url(self, git_url: str): repo_path = "/".join(repo_url.split("/")[1:]) return platform, repo_path - def create_temp_renovate_config(self, repo_urls: list, dependencies=None, is_local=False): + def create_temp_renovate_config(self, repo_urls: list, dependencies=None, is_local=False, platform=None): if dependencies is None: dependencies = [] current_script_dir = Path(__file__).parent @@ -70,9 +70,12 @@ def create_temp_renovate_config(self, repo_urls: list, dependencies=None, is_loc else: raise ValueError("Dependencies must be a list or a string") - sorted_dependencies = sorted(unique_dependencies) - dep_pattern = f"^(?i)({'|'.join(sorted_dependencies)})$" - config["packageRules"][1]["matchPackagePatterns"] = [dep_pattern] + if unique_dependencies: + sorted_dependencies = sorted(unique_dependencies) + dep_pattern = f"^(?i)({'|'.join(sorted_dependencies)})$" + config["packageRules"][1]["matchPackagePatterns"] = [dep_pattern] + if platform == "github": + config["prTitle"] = "Update vulnerable dependencies" timestamp = datetime.now().strftime("%Y%m%d%H%M%S") temp_file_path = Path("/renovate") / f"renovate_config_{timestamp}.json" diff --git a/surface/sca/tests/expected_renovate.json b/surface/sca/tests/expected_renovate.json index 74094ed0..326b8639 100644 --- a/surface/sca/tests/expected_renovate.json +++ b/surface/sca/tests/expected_renovate.json @@ -22,5 +22,6 @@ "enabled": true } ], - "prHourlyLimit": 0 + "prHourlyLimit": 0, + "prTitle": "Update vulnerable dependencies" } \ No newline at end of file