feat(scripts): add Write-CIStepSummary markdown table to Test-SHAStaleness github output

[AhmedMustafa249]

Pull Request

Description

• build markdown summary table with dependency name, SHA age, threshold, and stale/current status in github output branch of Write-OutputResult
• invoke Write-CIStepSummary after per-dependency Write-CIAnnotation loop
• add 12 Pester tests asserting Write-CIAnnotation call counts and Write-CIStepSummary content

Related Issue(s)

Fixes #633

Type of Change

Select all that apply:

Code & Documentation:

• Bug fix (non-breaking change fixing an issue)
• New feature (non-breaking change adding functionality)
• Breaking change (fix or feature causing existing functionality to change)
• Documentation update

Infrastructure & Configuration:

• GitHub Actions workflow
• Linting configuration (markdown, PowerShell, etc.)
• Security configuration
• DevContainer configuration
• Dependency update

Other:

• Script/automation (.ps1, .sh, .py)
• Other (please describe):

Testing

• 12 new Pester tests added across two contexts (GitHub output format with stale dependencies and GitHub output format with no stale dependencies)
• Tests verify Write-CIAnnotation call counts (per-item Warning, aggregate Error/Notice) and Write-CIStepSummary content (table header, dependency names, stale status, totals, all-clear message)
• Mocks placed inside each It block to work around Pester 5 module-scoping behavior with module-imported functions
• npm run lint:ps passes clean
• npm run test:ps passes

Checklist

Required Checks

• Documentation is updated (if applicable)
• Files follow existing naming conventions
• Changes are backwards compatible (if applicable)
• Tests added for new functionality (if applicable)

Required Automated Checks

The following validation commands must pass before merging:

• Markdown linting: npm run lint:md
• Spell checking: npm run spell-check
• Frontmatter validation: npm run lint:frontmatter
• Skill structure validation: npm run validate:skills
• Link validation: npm run lint:md-links
• PowerShell analysis: npm run lint:ps

Security Considerations

• This PR does not contain any sensitive or NDA information
• Any new dependencies have been reviewed for security issues
• Security-related scripts follow the principle of least privilege

Additional Notes

Minor findings:

• Mixed stale/current test gap: Both test dependencies use DaysOld > MaxAge (45 and 90 vs threshold 30). No test exercises the ✅ Current row status alongside a stale row in the same table. A mixed-scenario test (e.g., DaysOld = 10 + DaysOld = 45) would validate the stale/clean counting logic and both status indicator branches.

• Message content not asserted: Tests verify -Level parameter filters but not -Message content (e.g., severity tag [Low], dependency details). Adding -Message ParameterFilter assertions would strengthen coverage.

Potential Follow-up work would include:

• Adding a mixed stale/current test context with dependencies both above and below $MaxAge
• Add -Message content assertions for Write-CIAnnotation calls

[Copilot]

Pull request overview

This pull request adds GitHub Actions step summary support to the Test-SHAStaleness.ps1 script by implementing Write-CIStepSummary with a markdown table showing dependency staleness results. The change addresses issue #633 where SHA staleness checks produced CI annotations but left the job summary tab empty.

Changes:

• Add markdown table generation in the GitHub output format branch of Write-OutputResult showing dependency name, SHA age, threshold, and status
• Call Write-CIStepSummary after per-dependency annotations to populate the GitHub Actions job summary
• Add 12 Pester tests across two contexts to verify annotation counts and summary content

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 5 comments.

File	Description
scripts/security/Test-SHAStaleness.ps1	Adds Write-CIStepSummary call with markdown table for GitHub output format; adds UTF-8 BOM to first line
scripts/tests/security/Test-SHAStaleness.Tests.ps1	Adds two new test contexts with 12 test cases mocking Write-CIAnnotation and Write-CIStepSummary

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.86%. Comparing base (ac939aa) to head (3e0bbb8).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #660      +/-   ##
==========================================
+ Coverage   84.51%   84.86%   +0.35%     
==========================================
  Files          24       24              
  Lines        4868     4877       +9     
==========================================
+ Hits         4114     4139      +25     
+ Misses        754      738      -16     

Flag	Coverage Δ
pester	84.86% <100.00%> (+0.35%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
scripts/security/Test-SHAStaleness.ps1	69.15% <100.00%> (+4.26%)	⬆️

... and 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[katriendg]

Thank you @AhmedMustafa249 for your contribution!
We have a few open comments to address before we can merge this one. Should be minor hopefully.

[AhmedMustafa249]

Thank you @AhmedMustafa249 for your contribution! We have a few open comments to address before we can merge this one. Should be minor hopefully.

Hey @katriendg, thank you for all the comments!🙏 I'll get to resolving everything so we can get this merged asap 🫡

[katriendg]

I believe this looks good now, thank you for your contribution!

[katriendg]

@AhmedMustafa249 Can you please run the powershell linting and fix (two references), and see if the Powershell tests was a transient issue or you also get the issue and then fix? Thanks.

[AhmedMustafa249]

@katriendg All good now! 😄