@eurekadevsecops/radar 1.9.8 → 1.10.0

package/.config/release-please/manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "1.9.8"
+  ".": "1.10.0"
 }

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.10.0](https://github.com/EurekaDevSecOps/radarctl/compare/v1.9.8...v1.10.0) (2026-02-25)
+
+
+### Improvements
+
+* **PE-961:** Job path from Managed Scan runner being included in vulnerability results ([#63](https://github.com/EurekaDevSecOps/radarctl/issues/63)) ([f014598](https://github.com/EurekaDevSecOps/radarctl/commit/f0145985152b4d5cb5af7d10de7981777ce40ce4))
+
 ## [1.9.8](https://github.com/EurekaDevSecOps/radarctl/compare/v1.9.7...v1.9.8) (2026-02-19)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eurekadevsecops/radar",
-  "version": "1.9.8",
+  "version": "1.10.0",
   "description": "Radar is an open-source orchestrator of security scanners.",
   "homepage": "https://www.eurekadevsecops.com/radar",
   "keywords": [

package/src/util/sarif/transforms/normalize.js

@@ -1,5 +1,9 @@
 const path = require('node:path')
 module.exports = (sarif, dir, git, root) => {
+  // Pattern matches managed scanner temporary job directories:
+  // Format: /app/jobs/{uuid}/repo-{timestamp}/
+  // Example: /app/jobs/830f53a2-5f0c-4565-a262-607dfcd4d5e1/repo-1771653645/
+  const MANAGED_SCANNER_JOB_PREFIX = /^\/app\/jobs\/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\/repo-\d+\//
   // Normalize findings.
   for (const run of sarif.runs) {
 
@@ -19,8 +23,14 @@ module.exports = (sarif, dir, git, root) => {
     // (or if the root is not available then to the scan directory)
     if (!run.results) continue
     for (const result of run.results) {
-      for (const location of result.locations) {
-        if (location.physicalLocation?.artifactLocation?.uri?.startsWith('/app')) {
+      for (const location of result.locations) {    
+        if (location.physicalLocation?.artifactLocation?.uri?.match(MANAGED_SCANNER_JOB_PREFIX)) {
+          let file = location.physicalLocation.artifactLocation.uri.replace(MANAGED_SCANNER_JOB_PREFIX, '')
+          if (subfolder) file = path.join(subfolder, file)
+          if (result?.message?.text) result.message.text = result.message.text.replace(location.physicalLocation.artifactLocation.uri, file)
+          location.physicalLocation.artifactLocation.uri = file
+        }
+        else if (location.physicalLocation?.artifactLocation?.uri?.startsWith('/app')) {
           let file = path.join(subfolder, path.relative('/app', location.physicalLocation.artifactLocation.uri))
           if (result?.message?.text) result.message.text = result.message.text.replace(location.physicalLocation.artifactLocation.uri, file)
           location.physicalLocation.artifactLocation.uri = file