fix(cli): fix --no-warnings, exit code, github output and threshold config

[v0ropaev]

Change Description

Fixes four presidio-cli bugs described in #2265:

• --no-warnings crash: PIIProblem now has level: "error" when the score is 1.0, "warning" otherwise. This is the split Format.standard_color already used, and it now reads problem.level.
• Exit code: show_problems() returns the number of problems it printed (after --no-warnings filtering), and run() adds these up across files and stdin, so the existing if prob_num > 0 check works.
• -f github: prints ::warning / ::error workflow commands, with property values and the message escaped the way @actions/core does it (%, CR, LF, plus : and , in properties). The ./ prefix that presidio . adds is removed from the file property, as run() already does before analyze(). Example: ::error file=pii.txt,line=2,col=51::2:51 [CREDIT_CARD] score=1.0. Escaping also means a file name with a newline can no longer print its own workflow command into the log.
• Config threshold: the configured value is converted and range-checked before it is stored. Out-of-range values (threshold: 5), non-numbers (abc), YAML booleans (true, which float() would read as 1.0) and integers too large for a float now raise PresidioCLIConfigError instead of being accepted silently or crashing.

Tests: the Mock-based problems fixture, which hid the missing attribute, now uses real PIIProblem / RecognizerResult objects. Tests that asserted the old return value and exit code (rc == 0, exit 0 on a workspace with a card number) are updated. Each bug has new tests that fail on main and pass with this change; the color-split and valid-threshold tests are regression guards that pass on both. README: corrected github example, plus new "Warnings and errors" and "Exit codes" sections.

Behavior changes

• presidio now exits 1 when it reports at least one finding, warnings included (it always exited 0 before). CI jobs or hooks that run it will fail on findings; presidio . || true keeps the old behavior. If you would rather follow yamllint (exit 1 only for errors, warnings exit 0 unless --strict), I can change it.
• --no-warnings prints only score-1.0 findings (before, it crashed on the first finding).
• -f github (and auto on GitHub Actions) output changes from ::<score> file=...::L:C [TYPE] to ::warning|error file=...::L:C [TYPE] score=S and now creates annotations. For stdin the file property is still stdin; that can be a follow-up.
• An invalid config-file threshold is now a config error (exit 1 with a message).
• standard, colored and parsable output text is unchanged.

Scoring 1.0 as "error" is a judgment call that follows the existing colored output. I can make it configurable if you prefer. The two commits are independent (the config threshold fix is the second one) and can be split into separate PRs if that is easier to review.

Issue reference

Fixes #2265

Checklist

• I have reviewed the contribution guidelines
• I agree to follow this project's Code of Conduct
• I confirm that I have the right to submit this contribution and that it does not knowingly contain proprietary or confidential code.
• My code includes unit tests
• All unit tests and lint checks pass locally
• My PR contains documentation updates / additions if required

[Copilot]

🟢 Approval recommended

The requested fixes are covered by tests and documentation with no unresolved blocking issues.

Pull request overview

Fixes presidio-cli warning filtering, exit codes, GitHub Actions annotations, and threshold validation.

Changes:

• Adds severity classification and correct problem counting.
• Formats and escapes GitHub annotations.
• Validates configured thresholds.
• Updates tests and documentation.

File summaries

File	Description
presidio-cli/tests/test_config.py	Tests threshold validation.
presidio-cli/tests/test_cli.py	Tests output and exit-code behavior.
presidio-cli/tests/test_analyzer.py	Tests severity classification.
presidio-cli/README.md	Documents updated behavior.
presidio-cli/presidio_cli/config.py	Validates threshold values.
presidio-cli/presidio_cli/cli.py	Fixes filtering, exit codes, and GitHub output.
presidio-cli/presidio_cli/analyzer.py	Adds finding severity classification.

Review details

• Files reviewed: 7/7 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.