fixing the source of the commit sha

Author: flowstate

socketsecurity/core/git_interface.py

@@ -1,4 +1,5 @@
 import urllib.parse
+import os
 
 from git import Repo
 
@@ -14,7 +15,18 @@ def __init__(self, path: str):
         self.repo = Repo(path)
         assert self.repo
         self.head = self.repo.head
-        self.commit = self.head.commit
+        
+        # Use GITHUB_SHA if available, otherwise fall back to head commit
+        github_sha = os.getenv('GITHUB_SHA')
+        if github_sha:
+            try:
+                self.commit = self.repo.commit(github_sha)
+            except Exception as error:
+                log.debug(f"Failed to get commit from GITHUB_SHA: {error}")
+                self.commit = self.head.commit
+        else:
+            self.commit = self.head.commit
+        
         self.repo_name = self.repo.remotes.origin.url.split('.git')[0].split('/')[-1]
         try:
             self.branch = self.head.reference

socketsecurity/core/scm/github.py

@@ -41,6 +41,10 @@ def from_env(cls) -> 'GithubConfig':
             log.error("Unable to get Github API Token from GH_API_TOKEN")
             sys.exit(2)
 
+        # Add debug logging
+        sha = os.getenv('GITHUB_SHA', '')
+        log.debug(f"Loading SHA from GITHUB_SHA: {sha}")
+        
         repository = os.getenv('GITHUB_REPOSITORY', '')
         owner = os.getenv('GITHUB_REPOSITORY_OWNER', '')
         if '/' in repository: