vaspera 2.5.0

package/dist/action/pr-comment.js

@@ -0,0 +1,301 @@
+/**
+ * PR Comment - Pull Request Comment Formatting
+ *
+ * Generates and posts formatted comments on pull requests
+ * with scan results and certification status.
+ *
+ * @module action/pr-comment
+ */
+/**
+ * Comment marker for identifying Vaspera comments
+ */
+const COMMENT_MARKER = "<!-- vaspera-hardening-comment -->";
+/**
+ * Generate PR comment content from scan results
+ */
+export function generatePrComment(scanResult, context, certificationLevel) {
+    const { bySeverity, totalFindings, scanners } = scanResult;
+    // Title with badge
+    const title = generateTitle(bySeverity, certificationLevel);
+    // Summary section
+    const summary = generateSummary(scanResult);
+    // Findings table (top 20)
+    const findingsTable = generateFindingsTable(scanResult);
+    // Scanner status
+    const scannerStatus = generateScannerStatus(scanners);
+    // Certification badge if applicable
+    const certificationBadge = certificationLevel
+        ? generateCertificationBadge(certificationLevel)
+        : undefined;
+    // Footer
+    const footer = generateFooter();
+    return {
+        title,
+        summary,
+        findingsTable,
+        scannerStatus,
+        certificationBadge,
+        footer,
+    };
+}
+/**
+ * Generate full comment body
+ */
+export function formatCommentBody(content) {
+    const sections = [
+        COMMENT_MARKER,
+        "",
+        content.title,
+        "",
+        content.summary,
+        "",
+    ];
+    if (content.certificationBadge) {
+        sections.push(content.certificationBadge, "");
+    }
+    sections.push("## Scanner Results", "", content.scannerStatus, "");
+    if (content.findingsTable) {
+        sections.push("## Top Findings", "", content.findingsTable, "");
+    }
+    sections.push(content.footer);
+    return sections.join("\n");
+}
+/**
+ * Generate title with status icon
+ */
+function generateTitle(bySeverity, certificationLevel) {
+    const hasCritical = bySeverity.critical > 0;
+    const hasHigh = bySeverity.high > 0;
+    let icon;
+    let status;
+    if (certificationLevel) {
+        switch (certificationLevel) {
+            case "certified":
+                icon = "✅";
+                status = "Certified";
+                break;
+            case "approved":
+                icon = "🟢";
+                status = "Approved";
+                break;
+            case "review_required":
+                icon = "🟡";
+                status = "Review Required";
+                break;
+            case "blocked":
+                icon = "🔴";
+                status = "Blocked";
+                break;
+            default:
+                icon = "📊";
+                status = "Scanned";
+        }
+    }
+    else if (hasCritical) {
+        icon = "🔴";
+        status = "Critical Issues Found";
+    }
+    else if (hasHigh) {
+        icon = "🟠";
+        status = "High Severity Issues Found";
+    }
+    else if (bySeverity.medium > 0) {
+        icon = "🟡";
+        status = "Medium Severity Issues Found";
+    }
+    else if (bySeverity.low > 0 || bySeverity.info > 0) {
+        icon = "🟢";
+        status = "Low Severity Issues Found";
+    }
+    else {
+        icon = "✅";
+        status = "No Issues Found";
+    }
+    return `# ${icon} Vaspera Hardening: ${status}`;
+}
+/**
+ * Generate summary section
+ */
+function generateSummary(scanResult) {
+    const { bySeverity, totalFindings, totalDuration } = scanResult;
+    const lines = [
+        "### Summary",
+        "",
+        `| Severity | Count |`,
+        `|----------|-------|`,
+        `| 🔴 Critical | ${bySeverity.critical} |`,
+        `| 🟠 High | ${bySeverity.high} |`,
+        `| 🟡 Medium | ${bySeverity.medium} |`,
+        `| 🔵 Low | ${bySeverity.low} |`,
+        `| ⚪ Info | ${bySeverity.info} |`,
+        `| **Total** | **${totalFindings}** |`,
+        "",
+        `⏱️ Scan completed in ${(totalDuration / 1000).toFixed(1)}s`,
+    ];
+    return lines.join("\n");
+}
+/**
+ * Generate scanner status table
+ */
+function generateScannerStatus(scanners) {
+    const lines = [
+        "| Scanner | Findings | Status | Duration |",
+        "|---------|----------|--------|----------|",
+    ];
+    for (const scanner of scanners) {
+        const status = scanner.success ? "✅" : `❌ ${scanner.error?.slice(0, 30) || "Failed"}`;
+        const duration = `${(scanner.duration / 1000).toFixed(1)}s`;
+        lines.push(`| ${scanner.scanner} | ${scanner.findings.length} | ${status} | ${duration} |`);
+    }
+    return lines.join("\n");
+}
+/**
+ * Generate findings table (top 20 critical/high)
+ */
+function generateFindingsTable(scanResult) {
+    const allFindings = [];
+    for (const scanner of scanResult.scanners) {
+        allFindings.push(...scanner.findings);
+    }
+    // Sort by severity (critical first, then high)
+    const severityOrder = {
+        critical: 5,
+        high: 4,
+        medium: 3,
+        low: 2,
+        info: 1,
+    };
+    allFindings.sort((a, b) => severityOrder[b.severity] - severityOrder[a.severity]);
+    // Take top 20
+    const topFindings = allFindings.slice(0, 20);
+    if (topFindings.length === 0) {
+        return "_No findings to display_";
+    }
+    const lines = [
+        "<details>",
+        "<summary>Click to expand findings</summary>",
+        "",
+        "| Severity | File | Line | Message | Scanner |",
+        "|----------|------|------|---------|---------|",
+    ];
+    for (const finding of topFindings) {
+        const severityIcon = getSeverityIcon(finding.severity);
+        const shortMessage = finding.message.slice(0, 50) + (finding.message.length > 50 ? "..." : "");
+        const shortFile = finding.file.length > 30
+            ? "..." + finding.file.slice(-27)
+            : finding.file;
+        lines.push(`| ${severityIcon} ${finding.severity} | \`${shortFile}\` | ${finding.line} | ${shortMessage} | ${finding.scanner} |`);
+    }
+    lines.push("", "</details>");
+    if (allFindings.length > 20) {
+        lines.push("", `_...and ${allFindings.length - 20} more findings_`);
+    }
+    return lines.join("\n");
+}
+/**
+ * Get icon for severity level
+ */
+function getSeverityIcon(severity) {
+    switch (severity) {
+        case "critical":
+            return "🔴";
+        case "high":
+            return "🟠";
+        case "medium":
+            return "🟡";
+        case "low":
+            return "🔵";
+        case "info":
+            return "⚪";
+        default:
+            return "⚪";
+    }
+}
+/**
+ * Generate certification badge
+ */
+function generateCertificationBadge(level) {
+    let badge;
+    let description;
+    switch (level) {
+        case "certified":
+            badge = "![Certified](https://img.shields.io/badge/Vaspera-Certified-brightgreen)";
+            description = "This codebase has passed all security checks and is certified for production.";
+            break;
+        case "approved":
+            badge = "![Approved](https://img.shields.io/badge/Vaspera-Approved-green)";
+            description = "This codebase has passed security review with minor issues noted.";
+            break;
+        case "review_required":
+            badge = "![Review Required](https://img.shields.io/badge/Vaspera-Review_Required-yellow)";
+            description = "This codebase requires manual review before production deployment.";
+            break;
+        case "blocked":
+            badge = "![Blocked](https://img.shields.io/badge/Vaspera-Blocked-red)";
+            description = "This codebase has critical issues that must be resolved before deployment.";
+            break;
+        default:
+            return "";
+    }
+    return `### Certification Status\n\n${badge}\n\n${description}`;
+}
+/**
+ * Generate footer
+ */
+function generateFooter() {
+    return `---
+_Generated by [Vaspera Hardening](https://github.com/RCOLKITT/hardening-mcp) • [View full report](https://github.com/RCOLKITT/hardening-mcp#readme)_`;
+}
+/**
+ * Find existing Vaspera comment on PR
+ */
+export async function findExistingComment(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+octokit, context) {
+    if (!context.pullRequest)
+        return null;
+    const response = await octokit.rest.issues.listComments({
+        owner: context.owner,
+        repo: context.repo,
+        issue_number: context.pullRequest.number,
+        per_page: 100,
+    });
+    for (const comment of response.data) {
+        if (comment.body?.includes(COMMENT_MARKER)) {
+            return comment.id;
+        }
+    }
+    return null;
+}
+/**
+ * Create or update PR comment
+ */
+export async function postPrComment(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+octokit, context, body) {
+    if (!context.pullRequest) {
+        throw new Error("Cannot post PR comment: not a pull request event");
+    }
+    const existingId = await findExistingComment(octokit, context);
+    if (existingId) {
+        // Update existing comment
+        const response = await octokit.rest.issues.updateComment({
+            owner: context.owner,
+            repo: context.repo,
+            comment_id: existingId,
+            body,
+        });
+        return { id: response.data.id, url: response.data.html_url };
+    }
+    else {
+        // Create new comment
+        const response = await octokit.rest.issues.createComment({
+            owner: context.owner,
+            repo: context.repo,
+            issue_number: context.pullRequest.number,
+            body,
+        });
+        return { id: response.data.id, url: response.data.html_url };
+    }
+}
+//# sourceMappingURL=pr-comment.js.map

package/dist/action/pr-comment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-comment.js","sourceRoot":"","sources":["../../src/action/pr-comment.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH;;GAEG;AACH,MAAM,cAAc,GAAG,oCAAoC,CAAC;AAE5D;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAgC,EAChC,OAAsB,EACtB,kBAA2B;IAE3B,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC;IAE3D,mBAAmB;IACnB,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAE5D,kBAAkB;IAClB,MAAM,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAE5C,0BAA0B;IAC1B,MAAM,aAAa,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAExD,iBAAiB;IACjB,MAAM,aAAa,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAEtD,oCAAoC;IACpC,MAAM,kBAAkB,GAAG,kBAAkB;QAC3C,CAAC,CAAC,0BAA0B,CAAC,kBAAkB,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;IAEd,SAAS;IACT,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAEhC,OAAO;QACL,KAAK;QACL,OAAO;QACP,aAAa;QACb,aAAa;QACb,kBAAkB;QAClB,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAyB;IACzD,MAAM,QAAQ,GAAG;QACf,cAAc;QACd,EAAE;QACF,OAAO,CAAC,KAAK;QACb,EAAE;QACF,OAAO,CAAC,OAAO;QACf,EAAE;KACH,CAAC;IAEF,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,QAAQ,CAAC,IAAI,CACX,oBAAoB,EACpB,EAAE,EACF,OAAO,CAAC,aAAa,EACrB,EAAE,CACH,CAAC;IAEF,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CACX,iBAAiB,EACjB,EAAE,EACF,OAAO,CAAC,aAAa,EACrB,EAAE,CACH,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9B,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CACpB,UAAoC,EACpC,kBAA2B;IAE3B,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC;IAEpC,IAAI,IAAY,CAAC;IACjB,IAAI,MAAc,CAAC;IAEnB,IAAI,kBAAkB,EAAE,CAAC;QACvB,QAAQ,kBAAkB,EAAE,CAAC;YAC3B,KAAK,WAAW;gBACd,IAAI,GAAG,GAAG,CAAC;gBACX,MAAM,GAAG,WAAW,CAAC;gBACrB,MAAM;YACR,KAAK,UAAU;gBACb,IAAI,GAAG,IAAI,CAAC;gBACZ,MAAM,GAAG,UAAU,CAAC;gBACpB,MAAM;YACR,KAAK,iBAAiB;gBACpB,IAAI,GAAG,IAAI,CAAC;gBACZ,MAAM,GAAG,iBAAiB,CAAC;gBAC3B,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,GAAG,IAAI,CAAC;gBACZ,MAAM,GAAG,SAAS,CAAC;gBACnB,MAAM;YACR;gBACE,IAAI,GAAG,IAAI,CAAC;gBACZ,MAAM,GAAG,SAAS,CAAC;QACvB,CAAC;IACH,CAAC;SAAM,IAAI,WAAW,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,CAAC;QACZ,MAAM,GAAG,uBAAuB,CAAC;IACnC,CAAC;SAAM,IAAI,OAAO,EAAE,CAAC;QACnB,IAAI,GAAG,IAAI,CAAC;QACZ,MAAM,GAAG,4BAA4B,CAAC;IACxC,CAAC;SAAM,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,GAAG,IAAI,CAAC;QACZ,MAAM,GAAG,8BAA8B,CAAC;IAC1C,CAAC;SAAM,IAAI,UAAU,CAAC,GAAG,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACrD,IAAI,GAAG,IAAI,CAAC;QACZ,MAAM,GAAG,2BAA2B,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,GAAG,CAAC;QACX,MAAM,GAAG,iBAAiB,CAAC;IAC7B,CAAC;IAED,OAAO,KAAK,IAAI,uBAAuB,MAAM,EAAE,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,UAAgC;IACvD,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,UAAU,CAAC;IAEhE,MAAM,KAAK,GAAG;QACZ,aAAa;QACb,EAAE;QACF,sBAAsB;QACtB,sBAAsB;QACtB,mBAAmB,UAAU,CAAC,QAAQ,IAAI;QAC1C,eAAe,UAAU,CAAC,IAAI,IAAI;QAClC,iBAAiB,UAAU,CAAC,MAAM,IAAI;QACtC,cAAc,UAAU,CAAC,GAAG,IAAI;QAChC,cAAc,UAAU,CAAC,IAAI,IAAI;QACjC,mBAAmB,aAAa,MAAM;QACtC,EAAE;QACF,wBAAwB,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;KAC7D,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAC5B,QAA0C;IAE1C,MAAM,KAAK,GAAG;QACZ,4CAA4C;QAC5C,4CAA4C;KAC7C,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC;QACtF,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5D,KAAK,CAAC,IAAI,CACR,KAAK,OAAO,CAAC,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,MAAM,MAAM,MAAM,QAAQ,IAAI,CAChF,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,UAAgC;IAC7D,MAAM,WAAW,GAA2B,EAAE,CAAC;IAE/C,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,+CAA+C;IAC/C,MAAM,aAAa,GAA6B;QAC9C,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;QACN,IAAI,EAAE,CAAC;KACR,CAAC;IAEF,WAAW,CAAC,IAAI,CACd,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAChE,CAAC;IAEF,cAAc;IACd,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE7C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,0BAA0B,CAAC;IACpC,CAAC;IAED,MAAM,KAAK,GAAG;QACZ,WAAW;QACX,6CAA6C;QAC7C,EAAE;QACF,gDAAgD;QAChD,gDAAgD;KACjD,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/F,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE;YACxC,CAAC,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACjC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QAEjB,KAAK,CAAC,IAAI,CACR,KAAK,YAAY,IAAI,OAAO,CAAC,QAAQ,QAAQ,SAAS,QAAQ,OAAO,CAAC,IAAI,MAAM,YAAY,MAAM,OAAO,CAAC,OAAO,IAAI,CACtH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IAE7B,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,WAAW,CAAC,MAAM,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,QAAkB;IACzC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,IAAI,CAAC;QACd,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC;QACd,KAAK,KAAK;YACR,OAAO,IAAI,CAAC;QACd,KAAK,MAAM;YACT,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,0BAA0B,CAAC,KAAa;IAC/C,IAAI,KAAa,CAAC;IAClB,IAAI,WAAmB,CAAC;IAExB,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,WAAW;YACd,KAAK,GAAG,0EAA0E,CAAC;YACnF,WAAW,GAAG,+EAA+E,CAAC;YAC9F,MAAM;QACR,KAAK,UAAU;YACb,KAAK,GAAG,kEAAkE,CAAC;YAC3E,WAAW,GAAG,mEAAmE,CAAC;YAClF,MAAM;QACR,KAAK,iBAAiB;YACpB,KAAK,GAAG,iFAAiF,CAAC;YAC1F,WAAW,GAAG,oEAAoE,CAAC;YACnF,MAAM;QACR,KAAK,SAAS;YACZ,KAAK,GAAG,8DAA8D,CAAC;YACvE,WAAW,GAAG,4EAA4E,CAAC;YAC3F,MAAM;QACR;YACE,OAAO,EAAE,CAAC;IACd,CAAC;IAED,OAAO,+BAA+B,KAAK,OAAO,WAAW,EAAE,CAAC;AAClE,CAAC;AAED;;GAEG;AACH,SAAS,cAAc;IACrB,OAAO;qJAC4I,CAAC;AACtJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;AACvC,8DAA8D;AAC9D,OAAY,EACZ,OAAsB;IAEtB,IAAI,CAAC,OAAO,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QACtD,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,MAAM;QACxC,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;IAEH,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3C,OAAO,OAAO,CAAC,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;AACjC,8DAA8D;AAC9D,OAAY,EACZ,OAAsB,EACtB,IAAY;IAEZ,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE/D,IAAI,UAAU,EAAE,CAAC;QACf,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YACvD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,UAAU;YACtB,IAAI;SACL,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,qBAAqB;QACrB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YACvD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,OAAO,CAAC,WAAW,CAAC,MAAM;YACxC,IAAI;SACL,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC/D,CAAC;AACH,CAAC"}

package/dist/action/pr-comment.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Unit tests for pr-comment module
+ */
+export {};
+//# sourceMappingURL=pr-comment.test.d.ts.map

package/dist/action/pr-comment.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-comment.test.d.ts","sourceRoot":"","sources":["../../src/action/pr-comment.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/action/pr-comment.test.js

@@ -0,0 +1,189 @@
+/**
+ * Unit tests for pr-comment module
+ */
+import { describe, it, expect } from "vitest";
+import { generatePrComment, formatCommentBody } from "./pr-comment.js";
+const mockContext = {
+    owner: "test-owner",
+    repo: "test-repo",
+    sha: "abc123",
+    ref: "refs/heads/main",
+    eventName: "pull_request",
+    pullRequest: {
+        number: 42,
+        base: { sha: "def456", ref: "main" },
+        head: { sha: "abc123", ref: "feature-branch" },
+    },
+    workflow: "CI",
+    runId: 12345,
+    runNumber: 1,
+    actor: "test-user",
+};
+const createMockScanResult = (bySeverity = {}) => ({
+    timestamp: "2024-01-01T00:00:00.000Z",
+    projectPath: "/test/project",
+    scanners: [
+        {
+            scanner: "semgrep",
+            findings: [],
+            duration: 1000,
+            success: true,
+        },
+        {
+            scanner: "gitleaks",
+            findings: [],
+            duration: 500,
+            success: true,
+        },
+    ],
+    totalFindings: Object.values(bySeverity).reduce((a, b) => a + (b || 0), 0),
+    bySeverity: {
+        critical: bySeverity.critical || 0,
+        high: bySeverity.high || 0,
+        medium: bySeverity.medium || 0,
+        low: bySeverity.low || 0,
+        info: bySeverity.info || 0,
+    },
+    byScanner: {
+        semgrep: 0,
+        "npm-audit": 0,
+        gitleaks: 0,
+        tsc: 0,
+        eslint: 0,
+        bandit: 0,
+        gosec: 0,
+        brakeman: 0,
+        trivy: 0,
+        "binary-analysis": 0,
+        "memory-safety": 0,
+        "race-condition": 0,
+        plugin: 0,
+    },
+    totalDuration: 1500,
+    allSucceeded: true,
+    failedScanners: [],
+});
+describe("generatePrComment", () => {
+    it("generates comment content structure", () => {
+        const scanResult = createMockScanResult();
+        const content = generatePrComment(scanResult, mockContext);
+        expect(content).toHaveProperty("title");
+        expect(content).toHaveProperty("summary");
+        expect(content).toHaveProperty("findingsTable");
+        expect(content).toHaveProperty("scannerStatus");
+        expect(content).toHaveProperty("footer");
+    });
+    it("shows critical status for critical findings", () => {
+        const scanResult = createMockScanResult({ critical: 1 });
+        const content = generatePrComment(scanResult, mockContext);
+        expect(content.title).toContain("🔴");
+        expect(content.title).toContain("Critical Issues Found");
+    });
+    it("shows high status for high findings", () => {
+        const scanResult = createMockScanResult({ high: 2 });
+        const content = generatePrComment(scanResult, mockContext);
+        expect(content.title).toContain("🟠");
+        expect(content.title).toContain("High Severity Issues Found");
+    });
+    it("shows medium status for medium findings", () => {
+        const scanResult = createMockScanResult({ medium: 3 });
+        const content = generatePrComment(scanResult, mockContext);
+        expect(content.title).toContain("🟡");
+        expect(content.title).toContain("Medium Severity Issues Found");
+    });
+    it("shows clean status for no findings", () => {
+        const scanResult = createMockScanResult();
+        const content = generatePrComment(scanResult, mockContext);
+        expect(content.title).toContain("✅");
+        expect(content.title).toContain("No Issues Found");
+    });
+    it("shows certification status when provided", () => {
+        const scanResult = createMockScanResult();
+        const content = generatePrComment(scanResult, mockContext, "certified");
+        expect(content.title).toContain("✅");
+        expect(content.title).toContain("Certified");
+        expect(content.certificationBadge).toBeDefined();
+        expect(content.certificationBadge).toContain("Certified");
+    });
+    it("includes severity counts in summary", () => {
+        const scanResult = createMockScanResult({ critical: 1, high: 2, medium: 3 });
+        const content = generatePrComment(scanResult, mockContext);
+        expect(content.summary).toContain("Critical");
+        expect(content.summary).toContain("1");
+        expect(content.summary).toContain("High");
+        expect(content.summary).toContain("2");
+        expect(content.summary).toContain("Medium");
+        expect(content.summary).toContain("3");
+    });
+    it("includes scanner status table", () => {
+        const scanResult = createMockScanResult();
+        const content = generatePrComment(scanResult, mockContext);
+        expect(content.scannerStatus).toContain("| Scanner |");
+        expect(content.scannerStatus).toContain("semgrep");
+        expect(content.scannerStatus).toContain("gitleaks");
+        expect(content.scannerStatus).toContain("✅");
+    });
+    it("shows no findings message when empty", () => {
+        const scanResult = createMockScanResult();
+        const content = generatePrComment(scanResult, mockContext);
+        expect(content.findingsTable).toContain("No findings to display");
+    });
+});
+describe("formatCommentBody", () => {
+    it("formats complete comment body", () => {
+        const scanResult = createMockScanResult();
+        const content = generatePrComment(scanResult, mockContext);
+        const body = formatCommentBody(content);
+        expect(body).toContain("<!-- vaspera-hardening-comment -->");
+        expect(body).toContain("Vaspera Hardening");
+        expect(body).toContain("## Scanner Results");
+        expect(body).toContain("## Top Findings");
+        expect(body).toContain("Generated by");
+    });
+    it("includes certification badge when present", () => {
+        const scanResult = createMockScanResult();
+        const content = generatePrComment(scanResult, mockContext, "approved");
+        const body = formatCommentBody(content);
+        expect(body).toContain("### Certification Status");
+        expect(body).toContain("Approved");
+    });
+    it("does not include certification section when not present", () => {
+        const scanResult = createMockScanResult();
+        const content = generatePrComment(scanResult, mockContext);
+        const body = formatCommentBody(content);
+        expect(body).not.toContain("### Certification Status");
+    });
+    it("includes marker for comment identification", () => {
+        const scanResult = createMockScanResult();
+        const content = generatePrComment(scanResult, mockContext);
+        const body = formatCommentBody(content);
+        expect(body.startsWith("<!-- vaspera-hardening-comment -->")).toBe(true);
+    });
+});
+describe("certification badges", () => {
+    it("generates certified badge", () => {
+        const scanResult = createMockScanResult();
+        const content = generatePrComment(scanResult, mockContext, "certified");
+        expect(content.certificationBadge).toContain("Certified-brightgreen");
+        expect(content.certificationBadge).toContain("passed all security checks");
+    });
+    it("generates approved badge", () => {
+        const scanResult = createMockScanResult();
+        const content = generatePrComment(scanResult, mockContext, "approved");
+        expect(content.certificationBadge).toContain("Approved-green");
+        expect(content.certificationBadge).toContain("minor issues");
+    });
+    it("generates review_required badge", () => {
+        const scanResult = createMockScanResult();
+        const content = generatePrComment(scanResult, mockContext, "review_required");
+        expect(content.certificationBadge).toContain("Review_Required-yellow");
+        expect(content.certificationBadge).toContain("manual review");
+    });
+    it("generates blocked badge", () => {
+        const scanResult = createMockScanResult();
+        const content = generatePrComment(scanResult, mockContext, "blocked");
+        expect(content.certificationBadge).toContain("Blocked-red");
+        expect(content.certificationBadge).toContain("critical issues");
+    });
+});
+//# sourceMappingURL=pr-comment.test.js.map

package/dist/action/pr-comment.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-comment.test.js","sourceRoot":"","sources":["../../src/action/pr-comment.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAIvE,MAAM,WAAW,GAAkB;IACjC,KAAK,EAAE,YAAY;IACnB,IAAI,EAAE,WAAW;IACjB,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,iBAAiB;IACtB,SAAS,EAAE,cAAc;IACzB,WAAW,EAAE;QACX,MAAM,EAAE,EAAE;QACV,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE;QACpC,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE;KAC/C;IACD,QAAQ,EAAE,IAAI;IACd,KAAK,EAAE,KAAK;IACZ,SAAS,EAAE,CAAC;IACZ,KAAK,EAAE,WAAW;CACnB,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,aAAiG,EAAE,EAC7E,EAAE,CAAC,CAAC;IAC1B,SAAS,EAAE,0BAA0B;IACrC,WAAW,EAAE,eAAe;IAC5B,QAAQ,EAAE;QACR;YACE,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,IAAI;SACd;QACD;YACE,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,GAAG;YACb,OAAO,EAAE,IAAI;SACd;KACF;IACD,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1E,UAAU,EAAE;QACV,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,CAAC;QAClC,IAAI,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC;QAC1B,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,CAAC;QAC9B,GAAG,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC;QACxB,IAAI,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC;KAC3B;IACD,SAAS,EAAE;QACT,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,CAAC;QACX,GAAG,EAAE,CAAC;QACN,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,CAAC;QACT,KAAK,EAAE,CAAC;QACR,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE,CAAC;QACR,iBAAiB,EAAE,CAAC;QACpB,eAAe,EAAE,CAAC;QAClB,gBAAgB,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC;KACV;IACD,aAAa,EAAE,IAAI;IACnB,YAAY,EAAE,IAAI;IAClB,cAAc,EAAE,EAAE;CACnB,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAE3D,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,UAAU,GAAG,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,UAAU,GAAG,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,UAAU,GAAG,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QAExE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,UAAU,GAAG,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAE3D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAE3D,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAE3D,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAExC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAExC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAExC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAExC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QAExE,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;QAEvE,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC/D,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAE9E,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACvE,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAEtE,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC5D,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/action/sarif-upload.d.ts

@@ -0,0 +1,104 @@
+/**
+ * SARIF Upload - GitHub Code Scanning Integration
+ *
+ * Uploads SARIF files to GitHub Code Scanning API.
+ *
+ * @module action/sarif-upload
+ */
+import type { AggregatedScanResult } from "../scanners/types.js";
+import type { GitHubContext } from "./types.js";
+/**
+ * SARIF 2.1.0 structure
+ */
+interface SarifReport {
+    $schema: string;
+    version: string;
+    runs: SarifRun[];
+}
+interface SarifRun {
+    tool: {
+        driver: {
+            name: string;
+            version: string;
+            informationUri: string;
+            rules: SarifRule[];
+        };
+    };
+    results: SarifResult[];
+    automationDetails?: {
+        id: string;
+    };
+}
+interface SarifRule {
+    id: string;
+    name: string;
+    shortDescription: {
+        text: string;
+    };
+    fullDescription?: {
+        text: string;
+    };
+    help?: {
+        text: string;
+        markdown?: string;
+    };
+    defaultConfiguration: {
+        level: "none" | "note" | "warning" | "error";
+    };
+    properties?: {
+        tags?: string[];
+        precision?: string;
+        "security-severity"?: string;
+    };
+}
+interface SarifResult {
+    ruleId: string;
+    level: "none" | "note" | "warning" | "error";
+    message: {
+        text: string;
+    };
+    locations: Array<{
+        physicalLocation: {
+            artifactLocation: {
+                uri: string;
+                uriBaseId: string;
+            };
+            region: {
+                startLine: number;
+                startColumn?: number;
+                endLine?: number;
+                endColumn?: number;
+            };
+        };
+    }>;
+    fingerprints?: {
+        primaryLocationLineHash?: string;
+    };
+    partialFingerprints?: Record<string, string>;
+}
+/**
+ * Convert aggregated scan results to SARIF format
+ */
+export declare function convertToSarif(scanResult: AggregatedScanResult): SarifReport;
+/**
+ * Write SARIF file to disk
+ */
+export declare function writeSarifFile(sarif: SarifReport, outputPath: string): Promise<string>;
+/**
+ * Upload SARIF to GitHub Code Scanning API
+ *
+ * Note: This requires the code-scanning: write permission
+ */
+export declare function uploadSarifToGitHub(octokit: any, context: GitHubContext, sarifPath: string): Promise<{
+    id: string;
+}>;
+/**
+ * Generate SARIF file path
+ */
+export declare function getSarifFilePath(workingDirectory: string): string;
+/**
+ * Check if SARIF upload is supported (requires write permission)
+ */
+export declare function checkSarifUploadSupported(octokit: any, context: GitHubContext): Promise<boolean>;
+export {};
+//# sourceMappingURL=sarif-upload.d.ts.map

package/dist/action/sarif-upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif-upload.d.ts","sourceRoot":"","sources":["../../src/action/sarif-upload.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,oBAAoB,EAAwB,MAAM,sBAAsB,CAAC;AACvF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;GAEG;AACH,UAAU,WAAW;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,QAAQ,EAAE,CAAC;CAClB;AAED,UAAU,QAAQ;IAChB,IAAI,EAAE;QACJ,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,MAAM,CAAC;YAChB,cAAc,EAAE,MAAM,CAAC;YACvB,KAAK,EAAE,SAAS,EAAE,CAAC;SACpB,CAAC;KACH,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,iBAAiB,CAAC,EAAE;QAClB,EAAE,EAAE,MAAM,CAAC;KACZ,CAAC;CACH;AAED,UAAU,SAAS;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACnC,eAAe,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACnC,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,oBAAoB,EAAE;QACpB,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;KAC9C,CAAC;IACF,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;CACH;AAED,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IAC7C,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1B,SAAS,EAAE,KAAK,CAAC;QACf,gBAAgB,EAAE;YAChB,gBAAgB,EAAE;gBAChB,GAAG,EAAE,MAAM,CAAC;gBACZ,SAAS,EAAE,MAAM,CAAC;aACnB,CAAC;YACF,MAAM,EAAE;gBACN,SAAS,EAAE,MAAM,CAAC;gBAClB,WAAW,CAAC,EAAE,MAAM,CAAC;gBACrB,OAAO,CAAC,EAAE,MAAM,CAAC;gBACjB,SAAS,CAAC,EAAE,MAAM,CAAC;aACpB,CAAC;SACH,CAAC;KACH,CAAC,CAAC;IACH,YAAY,CAAC,EAAE;QACb,uBAAuB,CAAC,EAAE,MAAM,CAAC;KAClC,CAAC;IACF,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,oBAAoB,GAAG,WAAW,CAuE5E;AAyDD;;GAEG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,WAAW,EAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAEvC,OAAO,EAAE,GAAG,EACZ,OAAO,EAAE,aAAa,EACtB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBzB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAE7C,OAAO,EAAE,GAAG,EACZ,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,OAAO,CAAC,CAYlB"}