Skip to content

Commit 32ba638

Browse files
committed
Minor cleanup
1 parent 194b40c commit 32ba638

File tree

4 files changed

+11
-42
lines changed

4 files changed

+11
-42
lines changed

dist/index.js

Lines changed: 4 additions & 19 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

dist/index.js.map

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

index.ts

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -100,7 +100,6 @@ export async function processScanResult(result: ScanExecutionResult, opts: Actio
100100
}
101101
}
102102

103-
104103
export {
105104
cliScannerURL,
106105
defaultSecureEndpoint,
@@ -110,7 +109,6 @@ export {
110109
cliScannerResult,
111110
};
112111

113-
114112
if (require.main === module) {
115113
run();
116114
}

src/sarif.ts

Lines changed: 6 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
import * as core from '@actions/core';
22
import fs from 'fs';
3-
import { Package, Report, FilterOptions, Vuln, filterPackages } from './report';
3+
import { Package, Report, FilterOptions, Vuln, filterPackages, SeverityNames } from './report';
44

55
import { version } from '../package.json';
66
const toolVersion = `${version}`;
@@ -115,23 +115,6 @@ export function vulnerabilities2SARIF(
115115
return (sarifOutput);
116116
}
117117

118-
function numericPriorityForSeverity(severity: string): number | undefined {
119-
switch (severity.toLowerCase()) {
120-
case 'critical':
121-
return 0
122-
case 'high':
123-
return 1
124-
case 'medium':
125-
return 2
126-
case 'low':
127-
return 3
128-
case 'negligible':
129-
return 4
130-
case 'any':
131-
return 5
132-
}
133-
}
134-
135118
function vulnerabilities2SARIFResByPackage(data: Report): [SARIFRule[], SARIFResult[]] {
136119
let rules: SARIFRule[] = [];
137120
let results: SARIFResult[] = [];
@@ -157,9 +140,12 @@ function vulnerabilities2SARIFResByPackage(data: Report): [SARIFRule[], SARIFRes
157140
pkg.vulns.forEach(vuln => {
158141
fullDescription += `${getSARIFVulnFullDescription(pkg, vuln)}\n\n\n`;
159142

160-
if (numericPriorityForSeverity(vuln.severity.value) ?? 5 < severity_num) {
143+
let sevNum = SeverityNames.indexOf(vuln.severity.value.toLowerCase() as any);
144+
sevNum = sevNum === -1 ? 5 : sevNum;
145+
146+
if (sevNum < severity_num) {
161147
severity_level = vuln.severity.value.toLowerCase();
162-
severity_num = numericPriorityForSeverity(vuln.severity.value) ?? 5;
148+
severity_num = sevNum;
163149
}
164150

165151
if (vuln.cvssScore.value.score > score) {

0 commit comments

Comments
 (0)