vaspera 2.5.0

package/dist/action/sarif-upload.js

@@ -0,0 +1,188 @@
+/**
+ * SARIF Upload - GitHub Code Scanning Integration
+ *
+ * Uploads SARIF files to GitHub Code Scanning API.
+ *
+ * @module action/sarif-upload
+ */
+import { readFile, writeFile } from "fs/promises";
+import { gzipSync } from "zlib";
+import { join } from "path";
+/**
+ * Convert aggregated scan results to SARIF format
+ */
+export function convertToSarif(scanResult) {
+    const rules = new Map();
+    const results = [];
+    for (const scanner of scanResult.scanners) {
+        for (const finding of scanner.findings) {
+            // Add rule if not already present
+            if (!rules.has(finding.ruleId)) {
+                rules.set(finding.ruleId, {
+                    id: finding.ruleId,
+                    name: finding.ruleId.split(":").pop() || finding.ruleId,
+                    shortDescription: { text: finding.message.slice(0, 100) },
+                    fullDescription: { text: finding.message },
+                    defaultConfiguration: {
+                        level: severityToSarifLevel(finding.severity),
+                    },
+                    properties: {
+                        tags: [finding.scanner, finding.severity],
+                        "security-severity": severityToScore(finding.severity),
+                    },
+                });
+            }
+            // Add result
+            results.push({
+                ruleId: finding.ruleId,
+                level: severityToSarifLevel(finding.severity),
+                message: { text: finding.message },
+                locations: [
+                    {
+                        physicalLocation: {
+                            artifactLocation: {
+                                uri: finding.file,
+                                uriBaseId: "%SRCROOT%",
+                            },
+                            region: {
+                                startLine: finding.line,
+                                startColumn: finding.column,
+                                endLine: finding.endLine,
+                                endColumn: finding.endColumn,
+                            },
+                        },
+                    },
+                ],
+                fingerprints: {
+                    primaryLocationLineHash: generateFingerprint(finding),
+                },
+            });
+        }
+    }
+    return {
+        $schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
+        version: "2.1.0",
+        runs: [
+            {
+                tool: {
+                    driver: {
+                        name: "Vaspera Hardening",
+                        version: "1.0.0",
+                        informationUri: "https://github.com/RCOLKITT/hardening-mcp",
+                        rules: Array.from(rules.values()),
+                    },
+                },
+                results,
+                automationDetails: {
+                    id: `vaspera-hardening/${scanResult.timestamp}`,
+                },
+            },
+        ],
+    };
+}
+/**
+ * Convert severity to SARIF level
+ */
+function severityToSarifLevel(severity) {
+    switch (severity) {
+        case "critical":
+        case "high":
+            return "error";
+        case "medium":
+            return "warning";
+        case "low":
+        case "info":
+            return "note";
+        default:
+            return "note";
+    }
+}
+/**
+ * Convert severity to security-severity score
+ */
+function severityToScore(severity) {
+    switch (severity) {
+        case "critical":
+            return "9.0";
+        case "high":
+            return "7.0";
+        case "medium":
+            return "4.0";
+        case "low":
+            return "2.0";
+        case "info":
+            return "0.0";
+        default:
+            return "0.0";
+    }
+}
+/**
+ * Generate a fingerprint for deduplication
+ */
+function generateFingerprint(finding) {
+    const data = `${finding.ruleId}:${finding.file}:${finding.line}:${finding.message.slice(0, 50)}`;
+    // Simple hash - in production use crypto
+    let hash = 0;
+    for (let i = 0; i < data.length; i++) {
+        const char = data.charCodeAt(i);
+        hash = (hash << 5) - hash + char;
+        hash = hash & hash; // Convert to 32-bit integer
+    }
+    return Math.abs(hash).toString(16).padStart(8, "0");
+}
+/**
+ * Write SARIF file to disk
+ */
+export async function writeSarifFile(sarif, outputPath) {
+    const content = JSON.stringify(sarif, null, 2);
+    await writeFile(outputPath, content, "utf-8");
+    return outputPath;
+}
+/**
+ * Upload SARIF to GitHub Code Scanning API
+ *
+ * Note: This requires the code-scanning: write permission
+ */
+export async function uploadSarifToGitHub(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+octokit, context, sarifPath) {
+    // Read and compress SARIF
+    const sarifContent = await readFile(sarifPath, "utf-8");
+    const compressed = gzipSync(sarifContent);
+    const base64Sarif = compressed.toString("base64");
+    // Upload to GitHub
+    const response = await octokit.rest.codeScanning.uploadSarif({
+        owner: context.owner,
+        repo: context.repo,
+        commit_sha: context.sha,
+        ref: context.ref,
+        sarif: base64Sarif,
+        tool_name: "Vaspera Hardening",
+    });
+    return { id: response.data.id || "unknown" };
+}
+/**
+ * Generate SARIF file path
+ */
+export function getSarifFilePath(workingDirectory) {
+    return join(workingDirectory, "vaspera-results.sarif");
+}
+/**
+ * Check if SARIF upload is supported (requires write permission)
+ */
+export async function checkSarifUploadSupported(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+octokit, context) {
+    try {
+        const response = await octokit.rest.repos.get({
+            owner: context.owner,
+            repo: context.repo,
+        });
+        // Check if we have push permission (implies code-scanning write)
+        return response.data.permissions?.push === true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=sarif-upload.js.map

package/dist/action/sarif-upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif-upload.js","sourceRoot":"","sources":["../../src/action/sarif-upload.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAoE5B;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,UAAgC;IAC7D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC3C,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC1C,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvC,kCAAkC;YAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE;oBACxB,EAAE,EAAE,OAAO,CAAC,MAAM;oBAClB,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,MAAM;oBACvD,gBAAgB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;oBACzD,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE;oBAC1C,oBAAoB,EAAE;wBACpB,KAAK,EAAE,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC;qBAC9C;oBACD,UAAU,EAAE;wBACV,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC;wBACzC,mBAAmB,EAAE,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC;qBACvD;iBACF,CAAC,CAAC;YACL,CAAC;YAED,aAAa;YACb,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC7C,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE;gBAClC,SAAS,EAAE;oBACT;wBACE,gBAAgB,EAAE;4BAChB,gBAAgB,EAAE;gCAChB,GAAG,EAAE,OAAO,CAAC,IAAI;gCACjB,SAAS,EAAE,WAAW;6BACvB;4BACD,MAAM,EAAE;gCACN,SAAS,EAAE,OAAO,CAAC,IAAI;gCACvB,WAAW,EAAE,OAAO,CAAC,MAAM;gCAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;gCACxB,SAAS,EAAE,OAAO,CAAC,SAAS;6BAC7B;yBACF;qBACF;iBACF;gBACD,YAAY,EAAE;oBACZ,uBAAuB,EAAE,mBAAmB,CAAC,OAAO,CAAC;iBACtD;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,gGAAgG;QACzG,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,mBAAmB;wBACzB,OAAO,EAAE,OAAO;wBAChB,cAAc,EAAE,2CAA2C;wBAC3D,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;qBAClC;iBACF;gBACD,OAAO;gBACP,iBAAiB,EAAE;oBACjB,EAAE,EAAE,qBAAqB,UAAU,CAAC,SAAS,EAAE;iBAChD;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,QAAgB;IAEhB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,OAAO,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC;QACnB,KAAK,KAAK,CAAC;QACX,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,KAAK,CAAC;QACf,KAAK,MAAM;YACT,OAAO,KAAK,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC;QACf,KAAK,KAAK;YACR,OAAO,KAAK,CAAC;QACf,KAAK,MAAM;YACT,OAAO,KAAK,CAAC;QACf;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,OAA6B;IACxD,MAAM,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACjG,yCAAyC;IACzC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;QACjC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,4BAA4B;IAClD,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAkB,EAClB,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/C,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;AACvC,8DAA8D;AAC9D,OAAY,EACZ,OAAsB,EACtB,SAAiB;IAEjB,0BAA0B;IAC1B,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAElD,mBAAmB;IACnB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;QAC3D,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,OAAO,CAAC,GAAG;QACvB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,mBAAmB;KAC/B,CAAC,CAAC;IAEH,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,SAAS,EAAE,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,gBAAwB;IACvD,OAAO,IAAI,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;AAC7C,8DAA8D;AAC9D,OAAY,EACZ,OAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAC5C,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;QAEH,iEAAiE;QACjE,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,KAAK,IAAI,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/action/sarif-upload.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Unit tests for sarif-upload module
+ */
+export {};
+//# sourceMappingURL=sarif-upload.test.d.ts.map

package/dist/action/sarif-upload.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif-upload.test.d.ts","sourceRoot":"","sources":["../../src/action/sarif-upload.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/action/sarif-upload.test.js

@@ -0,0 +1,206 @@
+/**
+ * Unit tests for sarif-upload module
+ */
+import { describe, it, expect, beforeEach, afterEach, afterAll } from "vitest";
+import { mkdir, rm, readFile } from "fs/promises";
+import { join } from "path";
+import { tmpdir } from "os";
+import { convertToSarif, writeSarifFile, getSarifFilePath } from "./sarif-upload.js";
+const TEST_BASE = join(tmpdir(), "vaspera-sarif-test-" + Date.now() + "-" + Math.random().toString(36).slice(2));
+let testDir;
+beforeEach(async () => {
+    testDir = join(TEST_BASE, "dir-" + Math.random().toString(36).slice(2));
+    await mkdir(testDir, { recursive: true });
+});
+afterEach(async () => {
+    try {
+        await rm(testDir, { recursive: true, force: true });
+    }
+    catch {
+        // Ignore cleanup errors
+    }
+});
+afterAll(async () => {
+    try {
+        await rm(TEST_BASE, { recursive: true, force: true });
+    }
+    catch {
+        // Ignore cleanup errors
+    }
+});
+const createMockFinding = (overrides = {}) => ({
+    scanner: "semgrep",
+    ruleId: "semgrep:sql-injection",
+    file: "src/db.ts",
+    line: 42,
+    message: "SQL injection vulnerability",
+    severity: "high",
+    confidence: 100,
+    ...overrides,
+});
+const createMockScanResult = (findings = []) => ({
+    timestamp: "2024-01-01T00:00:00.000Z",
+    projectPath: "/test/project",
+    scanners: [
+        {
+            scanner: "semgrep",
+            findings,
+            duration: 1000,
+            success: true,
+        },
+    ],
+    totalFindings: findings.length,
+    bySeverity: {
+        critical: findings.filter((f) => f.severity === "critical").length,
+        high: findings.filter((f) => f.severity === "high").length,
+        medium: findings.filter((f) => f.severity === "medium").length,
+        low: findings.filter((f) => f.severity === "low").length,
+        info: findings.filter((f) => f.severity === "info").length,
+    },
+    byScanner: {
+        semgrep: findings.length,
+        "npm-audit": 0,
+        gitleaks: 0,
+        tsc: 0,
+        eslint: 0,
+        bandit: 0,
+        gosec: 0,
+        brakeman: 0,
+        trivy: 0,
+        "binary-analysis": 0,
+        "memory-safety": 0,
+        "race-condition": 0,
+        plugin: 0,
+    },
+    totalDuration: 1000,
+    allSucceeded: true,
+    failedScanners: [],
+});
+describe("convertToSarif", () => {
+    it("generates valid SARIF structure", () => {
+        const scanResult = createMockScanResult();
+        const sarif = convertToSarif(scanResult);
+        expect(sarif.$schema).toContain("sarif-schema-2.1.0.json");
+        expect(sarif.version).toBe("2.1.0");
+        expect(sarif.runs).toHaveLength(1);
+    });
+    it("includes tool information", () => {
+        const scanResult = createMockScanResult();
+        const sarif = convertToSarif(scanResult);
+        const tool = sarif.runs[0].tool.driver;
+        expect(tool.name).toBe("Vaspera Hardening");
+        expect(tool.version).toBeDefined();
+        expect(tool.informationUri).toContain("github.com");
+    });
+    it("converts findings to SARIF results", () => {
+        const findings = [
+            createMockFinding({ ruleId: "rule-1", file: "a.ts", line: 10 }),
+            createMockFinding({ ruleId: "rule-2", file: "b.ts", line: 20 }),
+        ];
+        const scanResult = createMockScanResult(findings);
+        const sarif = convertToSarif(scanResult);
+        expect(sarif.runs[0].results).toHaveLength(2);
+    });
+    it("includes rule definitions", () => {
+        const findings = [
+            createMockFinding({ ruleId: "semgrep:sql-injection" }),
+            createMockFinding({ ruleId: "semgrep:xss" }),
+        ];
+        const scanResult = createMockScanResult(findings);
+        const sarif = convertToSarif(scanResult);
+        const rules = sarif.runs[0].tool.driver.rules;
+        expect(rules).toHaveLength(2);
+        expect(rules.map((r) => r.id)).toContain("semgrep:sql-injection");
+        expect(rules.map((r) => r.id)).toContain("semgrep:xss");
+    });
+    it("maps severity to SARIF level", () => {
+        const findings = [
+            createMockFinding({ severity: "critical", ruleId: "rule-1" }),
+            createMockFinding({ severity: "high", ruleId: "rule-2" }),
+            createMockFinding({ severity: "medium", ruleId: "rule-3" }),
+            createMockFinding({ severity: "low", ruleId: "rule-4" }),
+            createMockFinding({ severity: "info", ruleId: "rule-5" }),
+        ];
+        const scanResult = createMockScanResult(findings);
+        const sarif = convertToSarif(scanResult);
+        const results = sarif.runs[0].results;
+        expect(results[0].level).toBe("error"); // critical
+        expect(results[1].level).toBe("error"); // high
+        expect(results[2].level).toBe("warning"); // medium
+        expect(results[3].level).toBe("note"); // low
+        expect(results[4].level).toBe("note"); // info
+    });
+    it("includes file location in results", () => {
+        const findings = [createMockFinding({ file: "src/api/users.ts", line: 100, column: 5 })];
+        const scanResult = createMockScanResult(findings);
+        const sarif = convertToSarif(scanResult);
+        const location = sarif.runs[0].results[0].locations[0].physicalLocation;
+        expect(location.artifactLocation.uri).toBe("src/api/users.ts");
+        expect(location.region.startLine).toBe(100);
+        expect(location.region.startColumn).toBe(5);
+    });
+    it("includes automation details", () => {
+        const scanResult = createMockScanResult();
+        const sarif = convertToSarif(scanResult);
+        expect(sarif.runs[0].automationDetails).toBeDefined();
+        expect(sarif.runs[0].automationDetails?.id).toContain("vaspera-hardening");
+    });
+    it("generates fingerprints for deduplication", () => {
+        const findings = [createMockFinding()];
+        const scanResult = createMockScanResult(findings);
+        const sarif = convertToSarif(scanResult);
+        const result = sarif.runs[0].results[0];
+        expect(result.fingerprints).toBeDefined();
+        expect(result.fingerprints?.primaryLocationLineHash).toBeDefined();
+    });
+    it("includes security-severity score", () => {
+        const findings = [createMockFinding({ severity: "critical" })];
+        const scanResult = createMockScanResult(findings);
+        const sarif = convertToSarif(scanResult);
+        const rule = sarif.runs[0].tool.driver.rules[0];
+        expect(rule.properties?.["security-severity"]).toBe("9.0");
+    });
+    it("handles empty scan results", () => {
+        const scanResult = createMockScanResult([]);
+        const sarif = convertToSarif(scanResult);
+        expect(sarif.runs[0].results).toHaveLength(0);
+        expect(sarif.runs[0].tool.driver.rules).toHaveLength(0);
+    });
+});
+describe("writeSarifFile", () => {
+    it("writes SARIF to file", async () => {
+        const scanResult = createMockScanResult([createMockFinding()]);
+        const sarif = convertToSarif(scanResult);
+        const outputPath = join(testDir, "results.sarif");
+        await writeSarifFile(sarif, outputPath);
+        const content = await readFile(outputPath, "utf-8");
+        const parsed = JSON.parse(content);
+        expect(parsed.$schema).toContain("sarif-schema-2.1.0.json");
+        expect(parsed.version).toBe("2.1.0");
+    });
+    it("returns the output path", async () => {
+        const sarif = convertToSarif(createMockScanResult());
+        const outputPath = join(testDir, "output.sarif");
+        const result = await writeSarifFile(sarif, outputPath);
+        expect(result).toBe(outputPath);
+    });
+    it("writes formatted JSON", async () => {
+        const sarif = convertToSarif(createMockScanResult());
+        const outputPath = join(testDir, "formatted.sarif");
+        await writeSarifFile(sarif, outputPath);
+        const content = await readFile(outputPath, "utf-8");
+        // Formatted JSON has newlines
+        expect(content).toContain("\n");
+    });
+});
+describe("getSarifFilePath", () => {
+    it("returns path in working directory", () => {
+        const path = getSarifFilePath("/project/root");
+        expect(path).toBe("/project/root/vaspera-results.sarif");
+    });
+    it("uses correct filename", () => {
+        const path = getSarifFilePath("/any/path");
+        expect(path).toContain("vaspera-results.sarif");
+    });
+});
+//# sourceMappingURL=sarif-upload.test.js.map

package/dist/action/sarif-upload.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif-upload.test.js","sourceRoot":"","sources":["../../src/action/sarif-upload.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrF,MAAM,SAAS,GAAG,IAAI,CACpB,MAAM,EAAE,EACR,qBAAqB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAC/E,CAAC;AACF,IAAI,OAAe,CAAC;AAEpB,UAAU,CAAC,KAAK,IAAI,EAAE;IACpB,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;IAClB,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,YAA2C,EAAE,EAAwB,EAAE,CAAC,CAAC;IAClG,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,uBAAuB;IAC/B,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,EAAE;IACR,OAAO,EAAE,6BAA6B;IACtC,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,GAAG;IACf,GAAG,SAAS;CACb,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,WAAmC,EAAE,EAAwB,EAAE,CAAC,CAAC;IAC7F,SAAS,EAAE,0BAA0B;IACrC,WAAW,EAAE,eAAe;IAC5B,QAAQ,EAAE;QACR;YACE,OAAO,EAAE,SAAS;YAClB,QAAQ;YACR,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,IAAI;SACd;KACF;IACD,aAAa,EAAE,QAAQ,CAAC,MAAM;IAC9B,UAAU,EAAE;QACV,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;QAClE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;QAC1D,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;QAC9D,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;QACxD,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;KAC3D;IACD,SAAS,EAAE;QACT,OAAO,EAAE,QAAQ,CAAC,MAAM;QACxB,WAAW,EAAE,CAAC;QACd,QAAQ,EAAE,CAAC;QACX,GAAG,EAAE,CAAC;QACN,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,CAAC;QACT,KAAK,EAAE,CAAC;QACR,QAAQ,EAAE,CAAC;QACX,KAAK,EAAE,CAAC;QACR,iBAAiB,EAAE,CAAC;QACpB,eAAe,EAAE,CAAC;QAClB,gBAAgB,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC;KACV;IACD,aAAa,EAAE,IAAI;IACnB,YAAY,EAAE,IAAI;IAClB,cAAc,EAAE,EAAE;CACnB,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAEzC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAEzC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,QAAQ,GAAG;YACf,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YAC/D,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;SAChE,CAAC;QACF,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAEzC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,QAAQ,GAAG;YACf,iBAAiB,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;YACtD,iBAAiB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;SAC7C,CAAC;QACF,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAEzC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,QAAQ,GAAG;YACf,iBAAiB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC7D,iBAAiB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YACzD,iBAAiB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC3D,iBAAiB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YACxD,iBAAiB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;SAC1D,CAAC;QACF,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAEzC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW;QACnD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;QAC/C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACnD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC7C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,QAAQ,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACzF,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAEzC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACxE,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/D,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAEzC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,QAAQ,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAEzC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,QAAQ,GAAG,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAEzC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,UAAU,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAEzC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,UAAU,GAAG,oBAAoB,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAElD,MAAM,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAExC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,KAAK,GAAG,cAAc,CAAC,oBAAoB,EAAE,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAEvD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,KAAK,GAAG,cAAc,CAAC,oBAAoB,EAAE,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAEpD,MAAM,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAExC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACpD,8BAA8B;QAC9B,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,IAAI,GAAG,gBAAgB,CAAC,eAAe,CAAC,CAAC;QAE/C,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAE3C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/action/types.d.ts

@@ -0,0 +1,104 @@
+/**
+ * GitHub Action Types
+ *
+ * Types for the Vaspera Hardening GitHub Action.
+ *
+ * @module action/types
+ */
+import type { Severity } from "../certification/types.js";
+import type { AggregatedScanResult } from "../scanners/types.js";
+/**
+ * Action input parameters
+ */
+export interface ActionInputs {
+    mode: "scan" | "certify" | "diff";
+    failOn: Severity | "none";
+    uploadSarif: boolean;
+    commentOnPr: boolean;
+    scanners: string[];
+    agents: string[];
+    anthropicApiKey?: string;
+    workingDirectory: string;
+    configFile?: string;
+}
+/**
+ * Action output values
+ */
+export interface ActionOutputs {
+    certificationId?: string;
+    totalFindings: number;
+    criticalCount: number;
+    highCount: number;
+    mediumCount: number;
+    lowCount: number;
+    sarifFile?: string;
+    certificationLevel?: string;
+    scannerSummary: string;
+}
+/**
+ * GitHub context information
+ */
+export interface GitHubContext {
+    owner: string;
+    repo: string;
+    sha: string;
+    ref: string;
+    eventName: string;
+    pullRequest?: {
+        number: number;
+        base: {
+            sha: string;
+            ref: string;
+        };
+        head: {
+            sha: string;
+            ref: string;
+        };
+    };
+    workflow: string;
+    runId: number;
+    runNumber: number;
+    actor: string;
+}
+/**
+ * Changed file information for diff mode
+ */
+export interface ChangedFile {
+    filename: string;
+    status: "added" | "removed" | "modified" | "renamed" | "copied" | "changed" | "unchanged";
+    additions: number;
+    deletions: number;
+    changes: number;
+    previousFilename?: string;
+}
+/**
+ * PR comment content
+ */
+export interface PrCommentContent {
+    title: string;
+    summary: string;
+    findingsTable: string;
+    scannerStatus: string;
+    certificationBadge?: string;
+    footer: string;
+}
+/**
+ * Action result
+ */
+export interface ActionResult {
+    success: boolean;
+    outputs: ActionOutputs;
+    scanResult?: AggregatedScanResult;
+    certificationId?: string;
+    sarifPath?: string;
+    error?: string;
+}
+/**
+ * Severity threshold for failing the action
+ */
+export declare const SEVERITY_LEVELS: Record<Severity | "none", number>;
+/**
+ * Check if findings exceed the fail threshold
+ */
+export declare function exceedsThreshold(bySeverity: Record<Severity, number>, threshold: Severity | "none"): boolean;
+//# sourceMappingURL=types.d.ts.map

package/dist/action/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/action/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjE;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;IAClC,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE;YACJ,GAAG,EAAE,MAAM,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;SACb,CAAC;QACF,IAAI,EAAE;YACJ,GAAG,EAAE,MAAM,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;SACb,CAAC;KACH,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;IAC1F,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,EAAE,MAAM,CAO7D,CAAC;AAEF;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,EACpC,SAAS,EAAE,QAAQ,GAAG,MAAM,GAC3B,OAAO,CAYT"}

package/dist/action/types.js

@@ -0,0 +1,33 @@
+/**
+ * GitHub Action Types
+ *
+ * Types for the Vaspera Hardening GitHub Action.
+ *
+ * @module action/types
+ */
+/**
+ * Severity threshold for failing the action
+ */
+export const SEVERITY_LEVELS = {
+    critical: 5,
+    high: 4,
+    medium: 3,
+    low: 2,
+    info: 1,
+    none: 0,
+};
+/**
+ * Check if findings exceed the fail threshold
+ */
+export function exceedsThreshold(bySeverity, threshold) {
+    if (threshold === "none")
+        return false;
+    const thresholdLevel = SEVERITY_LEVELS[threshold];
+    for (const [severity, count] of Object.entries(bySeverity)) {
+        if (count > 0 && SEVERITY_LEVELS[severity] >= thresholdLevel) {
+            return true;
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=types.js.map

package/dist/action/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/action/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAiGH;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAsC;IAChE,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;CACR,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAoC,EACpC,SAA4B;IAE5B,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAEvC,MAAM,cAAc,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAElD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3D,IAAI,KAAK,GAAG,CAAC,IAAI,eAAe,CAAC,QAAoB,CAAC,IAAI,cAAc,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/action/types.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Unit tests for action types module
+ */
+export {};
+//# sourceMappingURL=types.test.d.ts.map

package/dist/action/types.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.test.d.ts","sourceRoot":"","sources":["../../src/action/types.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/action/types.test.js

@@ -0,0 +1,79 @@
+/**
+ * Unit tests for action types module
+ */
+import { describe, it, expect } from "vitest";
+import { SEVERITY_LEVELS, exceedsThreshold } from "./types.js";
+describe("SEVERITY_LEVELS", () => {
+    it("has correct severity ordering", () => {
+        expect(SEVERITY_LEVELS.critical).toBeGreaterThan(SEVERITY_LEVELS.high);
+        expect(SEVERITY_LEVELS.high).toBeGreaterThan(SEVERITY_LEVELS.medium);
+        expect(SEVERITY_LEVELS.medium).toBeGreaterThan(SEVERITY_LEVELS.low);
+        expect(SEVERITY_LEVELS.low).toBeGreaterThan(SEVERITY_LEVELS.info);
+        expect(SEVERITY_LEVELS.info).toBeGreaterThan(SEVERITY_LEVELS.none);
+    });
+    it("none has value 0", () => {
+        expect(SEVERITY_LEVELS.none).toBe(0);
+    });
+    it("critical has highest value", () => {
+        expect(SEVERITY_LEVELS.critical).toBe(5);
+    });
+});
+describe("exceedsThreshold", () => {
+    const emptySeverities = {
+        critical: 0,
+        high: 0,
+        medium: 0,
+        low: 0,
+        info: 0,
+    };
+    it("returns false when threshold is none", () => {
+        const severities = { ...emptySeverities, critical: 5, high: 10 };
+        expect(exceedsThreshold(severities, "none")).toBe(false);
+    });
+    it("returns false when no findings", () => {
+        expect(exceedsThreshold(emptySeverities, "critical")).toBe(false);
+        expect(exceedsThreshold(emptySeverities, "high")).toBe(false);
+        expect(exceedsThreshold(emptySeverities, "medium")).toBe(false);
+    });
+    it("returns true when critical findings exceed critical threshold", () => {
+        const severities = { ...emptySeverities, critical: 1 };
+        expect(exceedsThreshold(severities, "critical")).toBe(true);
+    });
+    it("returns true when high findings exceed critical threshold", () => {
+        // High is below critical threshold, so should NOT exceed
+        const severities = { ...emptySeverities, high: 5 };
+        expect(exceedsThreshold(severities, "critical")).toBe(false);
+    });
+    it("returns true when high findings exceed high threshold", () => {
+        const severities = { ...emptySeverities, high: 3 };
+        expect(exceedsThreshold(severities, "high")).toBe(true);
+    });
+    it("returns true when critical findings exceed high threshold", () => {
+        // Critical is above high, so it exceeds high threshold
+        const severities = { ...emptySeverities, critical: 1 };
+        expect(exceedsThreshold(severities, "high")).toBe(true);
+    });
+    it("returns true when medium findings exceed medium threshold", () => {
+        const severities = { ...emptySeverities, medium: 2 };
+        expect(exceedsThreshold(severities, "medium")).toBe(true);
+    });
+    it("handles multiple severity levels", () => {
+        const severities = {
+            critical: 0,
+            high: 2,
+            medium: 5,
+            low: 10,
+            info: 20,
+        };
+        expect(exceedsThreshold(severities, "critical")).toBe(false);
+        expect(exceedsThreshold(severities, "high")).toBe(true);
+        expect(exceedsThreshold(severities, "medium")).toBe(true);
+        expect(exceedsThreshold(severities, "low")).toBe(true);
+        expect(exceedsThreshold(severities, "info")).toBe(true);
+    });
+    it("returns true for info threshold when info findings exist", () => {
+        const severities = { ...emptySeverities, info: 1 };
+        expect(exceedsThreshold(severities, "info")).toBe(true);
+    });
+});
+//# sourceMappingURL=types.test.js.map