feat: Add detailed findings output to GitHub Actions logs

entrypoint.sh

@@ -290,6 +290,73 @@ for i, finding in enumerate(findings[:10]):
     fi
 fi
 
+# =============================================================================
+# Output detailed findings to logs (for visibility in GitHub Actions logs)
+# =============================================================================
+
+log_info "Detailed Findings"
+
+if [[ -f "$JSON_REPORT" && "$TOTAL" -gt 0 ]]; then
+    echo ""
+    echo "=============================================="
+    echo "SECURITY FINDINGS DETAILS"
+    echo "=============================================="
+    echo ""
+
+    python3 -c "
+import json
+
+with open('$JSON_REPORT', 'r') as f:
+    data = json.load(f)
+
+findings = data.get('findings', [])
+severity_order = {'CRITICAL': 0, 'HIGH': 1, 'MEDIUM': 2, 'LOW': 3, 'INFO': 4}
+findings.sort(key=lambda x: severity_order.get(x.get('severity', 'INFO'), 5))
+
+# Group by severity for cleaner output
+current_severity = None
+for finding in findings:
+    severity = finding.get('severity', 'INFO')
+    tool = finding.get('tool', 'unknown')
+    rule_id = finding.get('rule_id', 'N/A')
+    title = finding.get('title', finding.get('rule_id', 'Unknown'))
+    file_path = finding.get('file_path', 'N/A')
+    line = finding.get('line_number')
+    resource = finding.get('resource', '')
+    description = finding.get('description', '')
+    remediation = finding.get('remediation', '')
+
+    location = f'{file_path}:{line}' if line is not None else file_path
+
+    # Print severity header if changed
+    if severity != current_severity:
+        current_severity = severity
+        print(f'\\n--- {severity} ---\\n')
+
+    print(f'[{tool}] {rule_id}: {title}')
+    print(f'  Location: {location}')
+    if resource:
+        print(f'  Resource: {resource}')
+    if description and description != 'FAILED':
+        # Truncate long descriptions
+        desc = description[:200] + '...' if len(description) > 200 else description
+        print(f'  Description: {desc}')
+    if remediation:
+        # Truncate long remediation text
+        rem = remediation[:150] + '...' if len(remediation) > 150 else remediation
+        print(f'  Remediation: {rem}')
+    print()
+"
+
+    echo "=============================================="
+    echo "END OF FINDINGS DETAILS"
+    echo "=============================================="
+else
+    echo "No findings to display."
+fi
+
+log_end_group
+
 add_step_summary ""
 add_step_summary "---"
 add_step_summary "*Generated by [SDLC Code Scanner](https://github.com/crofton-cloud/sdlc-code-scanner)*"