Feature/osh integration

.github/workflows/ai-code-review.yml

@@ -24,21 +24,46 @@ jobs:
           git fetch origin "${{ env.PULL_REQUEST_BASE_REF }}"
           git checkout "${{ env.PULL_REQUEST_HEAD_REF }}"
           git diff "origin/${{ env.PULL_REQUEST_BASE_REF }}" > "diff.txt"
+
+          # Check diff size to avoid "Argument list too long" error
+          DIFF_SIZE=$(wc -c < "diff.txt")
+          MAX_DIFF_SIZE=100000  # 100KB limit for GitHub Actions output variables
+
+          if [ "$DIFF_SIZE" -gt "$MAX_DIFF_SIZE" ]; then
+            echo "skip_review=true" >> $GITHUB_OUTPUT
+            echo "Diff size ($DIFF_SIZE bytes) exceeds maximum ($MAX_DIFF_SIZE bytes). Skipping AI review for large PR."
+            exit 0
+          fi
+
+          echo "skip_review=false" >> $GITHUB_OUTPUT
           {
             echo "pull_request_diff<<EOF";
             cat "diff.txt";
             echo 'EOF';
           } >> $GITHUB_OUTPUT
+      - name: "Comment on skipped review"
+        if: steps.get_diff.outputs.skip_review == 'true'
+        uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: '**AI Code Review Skipped**: This PR is too large for automated review (diff size exceeds 100KB).'
+            })
       - uses: rubensflinco/[email protected]
         name: "Code Review by Gemini AI"
         id: review
+        if: steps.get_diff.outputs.skip_review != 'true'
         with:
           gemini_api_key: ${{ secrets.GEMINI_API_KEY }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
           github_repository: ${{ github.repository }}
           github_pull_request_number: ${{ github.event.pull_request.number }}
           git_commit_hash: ${{ github.event.pull_request.head.sha }}
-          model: "gemini-2.0-flash"
+          model: "gemini-2.5-flash"
           pull_request_diff: |-
             ${{ steps.get_diff.outputs.pull_request_diff }}
           pull_request_chunk_size: "3500"

deploy/sast-ai-chart/values.yaml

@@ -29,6 +29,8 @@ app:
     SAST_AI_WORKFLOW_NAMESPACE: sast-ai
     # Google Service Account configuration
     GOOGLE_SERVICE_ACCOUNT_SECRET_PATH: /etc/secrets/google-service-account-secret/service_account.json
+    # OSH Package filtering configuration
+    OSH_PACKAGES: "systemd,glibc"
 
   # Resource limits and requests
   resources:
@@ -210,6 +212,10 @@ configMap:
       # Logging configuration
       quarkus.log.category."org.jboss.logging".level=${QUARKUS_LOG_LEVEL}
 
+      # Package filtering - comma-separated list of packages to monitor
+      # Example: systemd,glibc
+      osh.packages=${OSH_PACKAGES:}
+
 ## Horizontal Pod Autoscaler
 hpa:
   enabled: false

pom.xml

@@ -61,6 +61,10 @@
             <groupId>io.quarkus</groupId>
             <artifactId>quarkus-hibernate-orm</artifactId>
         </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-scheduler</artifactId>
+        </dependency>
         <dependency>
             <groupId>io.quarkus</groupId>
             <artifactId>quarkus-flyway</artifactId>
@@ -97,6 +101,10 @@
             <groupId>io.quarkus</groupId>
             <artifactId>quarkus-hibernate-validator</artifactId>
         </dependency>
+        <dependency>
+            <groupId>io.quarkus</groupId>
+            <artifactId>quarkus-smallrye-health</artifactId>
+        </dependency>
         <!-- Google Sheets API dependencies -->
         <dependency>
             <groupId>com.google.apis</groupId>
@@ -154,6 +162,11 @@
             <artifactId>quarkus-jacoco</artifactId>
             <scope>test</scope>
         </dependency>
+        <dependency>
+            <groupId>org.jsoup</groupId>
+            <artifactId>jsoup</artifactId>
+            <version>1.18.3</version>
+        </dependency>
     </dependencies>
 
     <build>