fix: add ref and pipeline_id to commit status payload

Jonathan Mucha · claude · Jonathan Mucha · commit f91653fa1615 · 2026-02-05T15:40:07.000-08:00
GitLab uses (sha, name, ref) as unique key. Without ref,
re-runs fail with "name has already been taken".

Co-Authored-By: Claude Opus 4.6 &lt;noreply@anthropic.com&gt;
diff --git a/socketsecurity/core/scm/gitlab.py b/socketsecurity/core/scm/gitlab.py
@@ -282,6 +282,11 @@ def set_commit_status(self, state: str, description: str, target_url: str = '')
             "context": "socket-security",
             "description": description,
         }
+        if self.config.mr_source_branch:
+            payload["ref"] = self.config.mr_source_branch
+        pipeline_id = os.getenv("CI_PIPELINE_ID")
+        if pipeline_id:
+            payload["pipeline_id"] = int(pipeline_id)
         if target_url:
             payload["target_url"] = target_url
         try:
diff --git a/tests/unit/test_gitlab_commit_status.py b/tests/unit/test_gitlab_commit_status.py
@@ -45,6 +45,7 @@ def test_calls_correct_url_and_json_payload(self, mock_post):
                 "state": "success",
                 "context": "socket-security",
                 "description": "No blocking issues",
+                "ref": "feature",
                 "target_url": "https://app.socket.dev/report/123",
             },
             headers=config.headers,
