feat: Add filter by ecosystem

.github/workflows/ci.yml

@@ -31,6 +31,7 @@ jobs:
  # microsoft_teams_webhook: ${{ secrets.MICROSOFT_TEAMS_WEBHOOK }}
  # slack_webhook: ${{ secrets.SLACK_WEBHOOK }}
  # severity: low,medium
+ # ecosystem: npm,rubygems
  # count: 20
  # pager_duty_integration_key: ${{ secrets.PAGER_DUTY_INTEGRATION_KEY }}
  # zenduty_api_key: ${{ secrets.ZENDUTY_API_KEY }}

action.yml

@@ -37,6 +37,8 @@ inputs:
  default: 20
  severity:
  description: 'Comma separated list of severities. E.g. low,medium,high,critical (NO SPACES BETWEEN COMMA AND SEVERITY)'
+ ecosystem:
+ description: "A comma-separated list of ecosystems. If specified, only alerts for these ecosystems will be returned."
 branding:
  icon: 'alert-octagon'
  color: 'red'

src/fetch-alerts.ts

@@ -7,6 +7,7 @@ export const fetchAlerts = async (
  repositoryName: string,
  repositoryOwner: string,
  severity: string,
+ ecosystem: string,
  count: number,
 ): Promise<Alert[] | []> => {
  const octokit = new Octokit({
@@ -20,6 +21,7 @@ export const fetchAlerts = async (
  repo: repositoryName,
  state: 'open',
  severity,
+ ecosystem,
  per_page: count,
  })
  const alerts: Alert[] = response.data.map((dependabotAlert) =>

src/main.ts

@@ -31,9 +31,17 @@ async function run(): Promise<void> {
  const emailTransportSmtpPassword = getInput('email_transport_smtp_password')
  const count = parseInt(getInput('count'))
  const severity = getInput('severity')
+ const ecosystem = getInput('ecosystem')
  const { owner } = context.repo
  const { repo } = context.repo
- const alerts = await fetchAlerts(token, repo, owner, severity, count)
+ const alerts = await fetchAlerts(
+ token,
+ repo,
+ owner,
+ severity,
+ ecosystem,
+ count,
+ )
  if (alerts.length > 0) {
  if (microsoftTeamsWebhookUrl) {
  await sendAlertsToMicrosoftTeams(microsoftTeamsWebhookUrl, alerts)