add id fix

Author: kkartunov

.github/workflows/opengrep.yaml

@@ -27,10 +27,11 @@ jobs:
         run: |
           /home/runner/.opengrep/cli/latest/opengrep --config=r/all --sarif-output=opengrep-results.sarif --verbose .
 
-      - name: Fix SARIF severity values
+      - name: Fix SARIF for GitHub compatibility
         run: |
           python3 << 'EOF'
           import json
+          import hashlib
 
           # Load SARIF file
           with open('opengrep-results.sarif', 'r') as f:
@@ -48,19 +49,39 @@ jobs:
               'NOTE': '1.0'
           }
 
-          # Fix security-severity values
+          # Process each run
           for run in sarif.get('runs', []):
+              # Fix rule IDs and security-severity
               for rule in run.get('tool', {}).get('driver', {}).get('rules', []):
+                  # Truncate or hash long rule IDs
+                  if 'id' in rule and len(rule['id']) > 255:
+                      original_id = rule['id']
+                      # Keep first 200 chars and add hash of full ID
+                      hash_suffix = hashlib.sha256(original_id.encode()).hexdigest()[:8]
+                      rule['id'] = original_id[:200] + '...' + hash_suffix
+                      # Store original in properties for reference
+                      if 'properties' not in rule:
+                          rule['properties'] = {}
+                      rule['properties']['original-rule-id'] = original_id
+                  
+                  # Fix security-severity values
                   if 'properties' in rule and 'security-severity' in rule['properties']:
                       severity = rule['properties']['security-severity']
                       if isinstance(severity, str) and severity.upper() in severity_map:
                           rule['properties']['security-severity'] = severity_map[severity.upper()]
+              
+              # Fix result ruleIds to match truncated rule IDs
+              for result in run.get('results', []):
+                  if 'ruleId' in result and len(result['ruleId']) > 255:
+                      original_id = result['ruleId']
+                      hash_suffix = hashlib.sha256(original_id.encode()).hexdigest()[:8]
+                      result['ruleId'] = original_id[:200] + '...' + hash_suffix
 
           # Save fixed SARIF
           with open('opengrep-results.sarif', 'w') as f:
               json.dump(sarif, f, indent=2)
 
-          print("✓ Fixed SARIF severity values")
+          print("✓ Fixed SARIF for GitHub compatibility")
           EOF
 
       - name: Upload OpenGrep scan results to GitHub Security tab