Test diff scan

.github/workflows/bearer.yml

@@ -1,19 +1,18 @@
-name: Bearer
+name: Bearer PR Check
 
 on:
-  workflow_dispatch:
-  push:
-    branches:
-      - main
+  pull_request:
+    types: [opened, synchronize, reopened]
 
 permissions:
   contents: read
 
 jobs:
-  policy_check:
+  rule_check:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
-      - name: Run Report
-        id: report
-        uses: bearer/bearer-action@v2
+      - name: Bearer
+        uses: bearer/bearer-action@test/diff-changes
+        with:
+          diff: true

.gitlab-ci.yml

@@ -1,6 +1,6 @@
 stages:
   - reports
-  
+
 bearer:
   stage: reports
   only:
@@ -9,7 +9,7 @@ bearer:
     name: bearer/bearer
     entrypoint: [ "" ]
   script:
-    - bearer scan . --format gitlab-sast --output gl-sast-report.json
+    - bearer scan . --diff --format gitlab-sast --output gl-sast-report.json
   artifacts:
     reports:
       sast: gl-sast-report.json
@@ -19,7 +19,5 @@ bearer_mr_check:
   only:
     - merge_requests
   script:
-    - curl -sfL https://raw.githubusercontent.com/Bearer/bearer/main/contrib/install.sh | sh -s -- -b /usr/local/bin
     - curl -sfL https://raw.githubusercontent.com/reviewdog/reviewdog/master/install.sh | sh -s -- -b /usr/local/bin
-    - bearer scan . --format=rdjson --output=rd.json
-    - cat rd.json | reviewdog -f=rdjson -reporter=gitlab-mr-discussion
+    - ./bearer scan --diff . --debug

app/controllers/application_controller.rb → app/controllers/foo_controller.rb

@@ -32,7 +32,7 @@ def require_user!
   private
 
   def log_user
-    Rails.logger.info("current user: #{current_user.email}")
+    User.where("user.email = #{params[:email]}")
 
     cookies[:publisher_user] = current_user.email
 

foo.txt

@@ -0,0 +1 @@
+hello