mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-08-09 10:21:03 +00:00
04e9d18889
The policy verdict shown on the scan-detail banner was the snapshot computed once at scan time. When the deploy gate is set to honor suppressions, the gate re-reads current suppressions on every deploy, but the stored verdict never changed: after creating a matching suppression the banner kept claiming a violation the gate would now pass, and after deleting or expiring a suppression the banner kept reporting "ok" while the gate would block. Recompute the banner verdict against current suppressions when serving the scan detail, so it agrees with the gate across the create, update, delete, and expire lifecycle. The recompute runs only when honor-suppressions is enabled (otherwise suppressions affect neither the gate nor the verdict, and the stored snapshot is returned unchanged), is read-only, and falls back to the stored snapshot if it fails so an informational banner can never fail the scan-detail request.