Enhance error messaging and cleanup in license check and project reso…

[SondreFjaertoft]

fixen fra copilot

[Copilot]

Pull request overview

Improves the robustness of GitHub Actions workflow command logging and temporary-file handling in the Dependency-Track project resolver and license inventory scan.

Changes:

• Added escape_workflow_value to percent-encode workflow command payloads (e.g., ::warning::) in both the resolver script and the license-check action.
• Added an EXIT trap in the license-check action to centralize cleanup of temporary files.
• Escaped DT_PROJECT_NAME when included in warning annotations.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
resolve-dt-project/resolve-project.sh	Escapes warning prefix/message to safely emit ::warning:: workflow commands.
dt-license-check/action.yml	Adds workflow-command escaping, introduces temp-file cleanup trap, and escapes project name in warnings.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

Comments suppressed due to low confidence (1)

dt-license-check/action.yml:91

• cleanup_temp_files runs under set -e while an ERR trap is installed. If any rm fails (e.g., permission/IO issues), it can trigger the ERR trap during cleanup and emit a misleading warning / overwrite outputs. Make the cleanup best-effort by preventing rm failures from propagating.

            if [[ -n "$f" ]]; then rm -f "$f"; fi
          done
          if [[ -n "${COMPONENTS_FILE:-}" ]]; then
            rm -f "${COMPONENTS_FILE}.next" || true
          fi