Add filter by ecosystem (rubygems, npm, etc.)

.github/workflows/ci.yml

@@ -31,6 +31,7 @@ jobs:
           # microsoft_teams_webhook: ${{ secrets.MICROSOFT_TEAMS_WEBHOOK }}
           # slack_webhook: ${{ secrets.SLACK_WEBHOOK }}
           # severity: low,medium
+          # ecosystem: npm,rubygems
           # count: 20
           # pager_duty_integration_key: ${{ secrets.PAGER_DUTY_INTEGRATION_KEY }}
           # zenduty_api_key: ${{ secrets.ZENDUTY_API_KEY }}

action.yml

@@ -37,6 +37,8 @@ inputs:
     default: 20
   severity:
     description: 'Comma separated list of severities. E.g. low,medium,high,critical (NO SPACES BETWEEN COMMA AND SEVERITY)'
+  ecosystem:
+    description: "A comma-separated list of ecosystems. If specified, only alerts for these ecosystems will be returned."
 branding:
   icon: 'alert-octagon'
   color: 'red'

src/fetch-alerts.ts

@@ -7,6 +7,7 @@ export const fetchAlerts = async (
   repositoryName: string,
   repositoryOwner: string,
   severity: string,
+  ecosystem: string,
   count: number,
 ): Promise<Alert[] | []> => {
   const octokit = new Octokit({
@@ -20,6 +21,7 @@ export const fetchAlerts = async (
     repo: repositoryName,
     state: 'open',
     severity,
+    ecosystem,
     per_page: count,
   })
   const alerts: Alert[] = response.data.map((dependabotAlert) =>

src/main.ts

@@ -31,9 +31,17 @@ async function run(): Promise<void> {
     const emailTransportSmtpPassword = getInput('email_transport_smtp_password')
     const count = parseInt(getInput('count'))
     const severity = getInput('severity')
+    const ecosystem = getInput('ecosystem')
     const { owner } = context.repo
     const { repo } = context.repo
-    const alerts = await fetchAlerts(token, repo, owner, severity, count)
+    const alerts = await fetchAlerts(
+      token,
+      repo,
+      owner,
+      severity,
+      ecosystem,
+      count,
+    )
     if (alerts.length > 0) {
       if (microsoftTeamsWebhookUrl) {
         await sendAlertsToMicrosoftTeams(microsoftTeamsWebhookUrl, alerts)