Skip to content

PR2: Enhanced Logging with JetBrains Parity (AST-109633)#318

Open
cx-rahul-pidde wants to merge 7 commits intofeature/devassist-integration-branchfrom
feature/AST-109633-pr2-logging
Open

PR2: Enhanced Logging with JetBrains Parity (AST-109633)#318
cx-rahul-pidde wants to merge 7 commits intofeature/devassist-integration-branchfrom
feature/AST-109633-pr2-logging

Conversation

@cx-rahul-pidde
Copy link
Copy Markdown
Contributor

Enhanced Logging & Output Pane

  • Add comprehensive logging across all realtime scanners
  • Implement INFO/WARN/ERROR/DEBUG level messages
  • OutputPaneWriter improvements for visibility
  • CxAssistOutputPane enhancements
  • Logging parity with JetBrains plugin patterns
  • Scanner-specific log messages for ASCA, Secrets, IaC, Containers, OSS

Files Changed

  • OutputPaneWriter.cs
  • CxAssistOutputPane.cs
  • BaseRealtimeScannerService.cs
  • AscaService.cs
  • SecretsService.cs
  • IacService.cs
  • ContainersService.cs
  • OssService.cs
  • RealtimeScannerOrchestrator.cs

Related Issue

AST-109633

- Add comprehensive logging across all realtime scanners
- Implement INFO/WARN/ERROR/DEBUG level messages
- OutputPaneWriter improvements for visibility
- CxAssistOutputPane enhancements
- Logging parity with JetBrains plugin patterns
- Scanner-specific log messages for ASCA, Secrets, IaC, Containers, OSS

Base branch: feature/devassist-integration-branch
Related to: AST-109633
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 17, 2026

Logo
Checkmarx One – Scan Summary & Details7d3aeaf6-b3c0-45e2-820e-19e4e6c2352c


Policy Management Violations (2)
Policy Name Rule(s) Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities true
Commercial packages true

cx-rahul-pidde and others added 5 commits April 17, 2026 13:44
Disable auto-generation of TargetFrameworkAttribute in test project.
This prevents duplicate attribute conflicts during build on some SDK configurations.

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
…FindingsForScanner, and downgrade Newtonsoft.Json

- Add OutputWindowPaneName constant to CxConstants for output pane initialization
- Implement MergeUpdateFindingsForScanner method in CxAssistDisplayCoordinator to merge scanner-specific findings
- Downgrade Newtonsoft.Json from 13.0.3 to 13.0.1 to match pipeline constraints
- All scanner services (ASCA, Secrets, IaC, Containers, OSS) now have required method

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
…/AST-109633-ui-manager-changes

Synced VulnerabilityMapper with the production-ready implementation that includes:
- Proper MapSeverity() method for all scanner severity levels
- JetBrains-aligned ASCA column resolution with file reading
- Secrets grouping by secret type (one Vulnerability per Secret)
- IaC per-location Vulnerability creation
- Container scanning with per-CVE and per-image handling
- OSS/SCA package scanning with per-CVE and per-package handling
- Proper 0-based to 1-based line number conversion
- VulnerabilityLocation handling for multi-line ranges
- GetHighestSeverity() for display purposes

All FromXxx() methods now return List<Vulnerability> instead of Result,
fixing the type mismatch errors in all 5 scanner services.

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
…property

CxAscaDetail does not have a Column property. Removed the check for it
and rely on first non-whitespace column detection or problematicLine matching.

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
…eScannerService

CxAssistDisplayCoordinator:
- Add enabled-scanner filter in MergeUpdateFindingsForScanner() for consistency with UpdateFindings() and UpdateFindingsForFile()
- Remove "for testing" reference from UpdateFindingsForFile() production API documentation
- Clarify NormalizePath() defensive fallback behavior in comments

BaseRealtimeScannerService:
- Protect 5 TextDocument casting locations from InvalidCastException using safe 'as' operator with try-catch
- Added in: OnDocumentOpened, TrySyncLineChangeBaseline, OnTextChanged, OnDocumentClosing, InstantScanAsync
- Ensures scanner doesn't crash on unexpected COM object types

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants