autoremediator 0.4.1 → 0.5.0

package/README.md

@@ -4,6 +4,8 @@
 [![npm downloads](https://img.shields.io/npm/dm/autoremediator.svg)](https://www.npmjs.com/package/autoremediator)
 [![license](https://img.shields.io/npm/l/autoremediator.svg)](https://github.com/Rawlings/autoremediator/blob/master/LICENSE)
 [![node](https://img.shields.io/node/v/autoremediator.svg)](https://www.npmjs.com/package/autoremediator)
+[![Docker](https://img.shields.io/badge/docker-ghcr.io-blue)](https://github.com/Rawlings/autoremediator/pkgs/container/autoremediator)
+[![GitHub Actions](https://img.shields.io/badge/github--actions-marketplace-blue)](https://github.com/marketplace/actions/autoremediator)
 
 > [!WARNING]
 > Automated dependency remediation is a controversial practice.
@@ -18,6 +20,8 @@ It exposes stable SDK and CLI surfaces for direct CVE remediation and scanner-dr
 
 It also exposes non-mutating planning and correlation context for agent orchestration workflows.
 
+See the [documentation](https://rawlings.github.io/autoremediator/docs/getting-started) to get started.
+
 ## Why Teams Use It
 
 - Continuous remediation in CI and scheduled GitHub workflows
@@ -100,14 +104,6 @@ Public API naming canon: `runTests`, `policy`, `evidence`, `patchCount`, and `pa
 - Configure policy and branch protection before broad rollout
 - Use CI summaries and evidence outputs for operational governance
 
-## Getting Started Fast
-
-Start from the live guides instead of repo markdown:
-
-- [Quick setup](https://rawlings.github.io/autoremediator/docs/getting-started)
-- [Automation workflows](https://rawlings.github.io/autoremediator/docs/integrations)
-- [Safety controls](https://rawlings.github.io/autoremediator/docs/policy-and-safety)
-
 ## Package
 
 - [npm package](https://www.npmjs.com/package/autoremediator)

package/dist/{chunk-GBOD3DV6.js → chunk-VLXGEH7U.js}

@@ -2528,6 +2528,67 @@ function toCiSummary(report) {
 function ciExitCode(summary) {
   return summary.failedCount > 0 ? 1 : 0;
 }
+function severityToSarifLevel(severity) {
+  if (severity === "CRITICAL" || severity === "HIGH") return "error";
+  if (severity === "MEDIUM") return "warning";
+  if (severity === "LOW") return "note";
+  return "warning";
+}
+function toSarifOutput(report) {
+  const rules = [];
+  const results = [];
+  const seenRules = /* @__PURE__ */ new Set();
+  for (const r of report.reports) {
+    const severity = r.cveDetails?.severity ?? "UNKNOWN";
+    const level = severityToSarifLevel(severity);
+    const summary = r.cveDetails?.summary ?? r.cveId;
+    if (!seenRules.has(r.cveId)) {
+      seenRules.add(r.cveId);
+      rules.push({
+        id: r.cveId,
+        name: "VulnerableDependency",
+        shortDescription: { text: r.cveId },
+        fullDescription: { text: summary },
+        defaultConfiguration: { level },
+        helpUri: `https://osv.dev/vulnerability/${r.cveId}`,
+        properties: { severity }
+      });
+    }
+    for (const vp of r.vulnerablePackages) {
+      const fixText = vp.affected.firstPatchedVersion ? ` Fix: upgrade to ${vp.affected.firstPatchedVersion}.` : " No fixed version available.";
+      results.push({
+        ruleId: r.cveId,
+        level,
+        message: {
+          text: `${vp.installed.name}@${vp.installed.version} is vulnerable to ${r.cveId}: ${summary}${fixText}`
+        },
+        locations: [
+          {
+            physicalLocation: {
+              artifactLocation: { uri: "package.json", uriBaseId: "%SRCROOT%" }
+            }
+          }
+        ]
+      });
+    }
+  }
+  return {
+    version: "2.1.0",
+    $schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Documents/CommitteeSpecifications/2.1.0/sarif-schema-2.1.0.json",
+    runs: [
+      {
+        tool: {
+          driver: {
+            name: "autoremediator",
+            informationUri: "https://github.com/Rawlings/autoremediator",
+            rules
+          }
+        },
+        results
+      }
+    ]
+  };
+}
 
 export {
   runRemediationPipeline,
@@ -2535,6 +2596,7 @@ export {
   planRemediation,
   remediateFromScan,
   toCiSummary,
-  ciExitCode
+  ciExitCode,
+  toSarifOutput
 };
-//# sourceMappingURL=chunk-GBOD3DV6.js.map
+//# sourceMappingURL=chunk-VLXGEH7U.js.map