Function postFallbackComments

code-scan-action/src/main.ts:467–497

(
  githubToken: string,
  context: PullRequestContext,
  comments: Comment[],
  review: string | undefined,
  minimumSeverity: string,
)

}

async function postFallbackComments(
  githubToken: string,
  context: PullRequestContext,
  comments: Comment[],
  review: string | undefined,
  minimumSeverity: string,
): Promise<void> {
  core.info('📝 Server could not post comments - posting as fallback...');

  try {
    const octokit = github.getOctokit(githubToken);
    const {
      lineComments: preparedLineComments,
      generalComments,
      reviewBody,
    } = prepareComments(comments, review, minimumSeverity);
    const { lineComments, invalidLineComments } = await partitionReviewCommentsByDiff(
      githubToken,
      context,
      preparedLineComments,
    );

    await postReview(octokit, context, lineComments, reviewBody);
    await postGeneralComments(octokit, context, [...generalComments, ...invalidLineComments]);

    core.info('✅ All comments posted to PR by action');
  } catch (error) {
    core.error(`Failed to post comments: ${formatError(error)}`);
    core.warning('Comments could not be posted to PR');
  }
}

// The shared symlink-safe containment check lives at src/util/isPathWithinDir.ts, but
// importing it transitively pulls src/logger.ts (and the winston stack) into this bundle,