Skip to content

Platform report lists a rule's description and passing resources as findings #391

Open

Description

@refeed

In a platform-mode report, a failed tirith rule's detail block lists the evaluator's description and every resource the evaluator checked, as if all of them were findings. From StackGuardian/tirith-action-demo#28:

❌ tirith-demo-s3-owner-tag › s3-buckets-must-declare-an-owner
- Owner tag on every planned S3 bucket
- [aws_s3_bucket.analytics (create)] tags.Owner: `""` is empty
- [aws_s3_bucket.artifacts (no-op)] tags.Owner: `"rafid.aslam"` is not empty

Resources:
- aws_s3_bucket.analytics
- aws_s3_bucket.artifacts

Only the second line explains the failure. The first restates the check. The third, and the second address under Resources, is a bucket that passed.

Local mode in both the GitHub Action and the GitLab component already drops the description before rendering, so the same rule renders differently in the two modes.

Activity

  1. self-assigned this
    on Oct 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions