Analyzes DryRun security findings posted as comments on GitHub Pull Requests.
- Clone the repository
- Create a virtual environment:
python -m venv venv
source venv/bin/activate # On Windows: venv\Scripts\activate- Install dependencies:
pip install -r requirements.txt- Copy
.env.exampleto.env - Add your GitHub token to
.env
python main.pyThe script generates dryrun_findings_analysis.xlsx with:
- All PRs with DryRun findings
- Summary statistics
- Finding type breakdown