feat: migrate to Nuxt 4 (Nitro) and Tailwind CSS v3

server/lib/formatters/security.ts

@@ -0,0 +1,173 @@
+import type { NeutralMessage, NeutralAuthor } from "../types";
+import { GITHUB_COLORS } from "./colors";
+import { emojiPrefix, type T, buildMessage } from "./helpers";
+
+export function formatCodeScanningAlert(
+  payload: Record<string, unknown>,
+  repo: string | undefined,
+  author: NeutralAuthor,
+  t: T,
+  showEmoji: boolean,
+): NeutralMessage {
+  const action = (payload.action as string) ?? "created";
+  const alert = payload.alert as {
+    rule?: { id?: string; severity?: string; description?: string };
+    most_recent_instance?: { location?: { path?: string } };
+    state?: string;
+  };
+
+  const severity = alert.rule?.severity ?? "warning";
+  const colorKey =
+    severity === "critical"
+      ? "code_scanning_critical"
+      : severity === "high"
+        ? "code_scanning_high"
+        : severity === "medium"
+          ? "code_scanning_medium"
+          : "code_scanning_low";
+
+  const severityEmoji =
+    severity === "critical"
+      ? "🔴"
+      : severity === "high"
+        ? "🟠"
+        : severity === "medium"
+          ? "🟡"
+          : "⚪";
+  const al = t("actions." + action) ?? action;
+  const em = (e: string): string => emojiPrefix(e, showEmoji);
+
+  const fields: Array<{ name: string; value: string; inline?: boolean }> = [];
+
+  fields.push({
+    name: t("fields.severity"),
+    value: `${em(severityEmoji)}${severity}`,
+    inline: true,
+  });
+
+  if (alert.rule?.id) {
+    fields.push({
+      name: t("fields.rule"),
+      value: alert.rule.id,
+      inline: true,
+    });
+  }
+
+  if (alert.most_recent_instance?.location?.path) {
+    fields.push({
+      name: t("fields.file"),
+      value: `\`${alert.most_recent_instance.location.path}\``,
+      inline: false,
+    });
+  }
+
+  if (alert.rule?.description) {
+    fields.push({
+      name: t("fields.description"),
+      value: alert.rule.description,
+      inline: false,
+    });
+  }
+
+  return buildMessage(
+    {
+      author,
+      title: t("events.code_scanning.title", {
+        repo: repo ?? t("common.repository"),
+        action: al,
+      }),
+      color: GITHUB_COLORS[colorKey],
+      fields,
+    },
+    t,
+    repo,
+  );
+}
+
+export function formatDependabotAlert(
+  payload: Record<string, unknown>,
+  repo: string | undefined,
+  author: NeutralAuthor,
+  t: T,
+  showEmoji: boolean,
+): NeutralMessage {
+  const action = (payload.action as string) ?? "created";
+  const alert = payload.alert as {
+    security_advisory?: { severity?: string; summary?: string; description?: string };
+    security_vulnerability?: {
+      package?: { name?: string };
+      vulnerable_version_range?: string;
+      first_patched_version?: { identifier?: string };
+    };
+    state?: string;
+    dependency?: { package?: { name?: string } };
+    html_url?: string;
+  };
+
+  const severity = alert.security_advisory?.severity ?? "medium";
+  const colorKey =
+    severity === "critical"
+      ? "dependabot_critical"
+      : severity === "high"
+        ? "dependabot_high"
+        : severity === "medium"
+          ? "dependabot_medium"
+          : "dependabot_low";
+
+  const severityEmoji =
+    severity === "critical"
+      ? "🔴"
+      : severity === "high"
+        ? "🟠"
+        : severity === "medium"
+          ? "🟡"
+          : "⚪";
+  const al = t("actions." + action) ?? action;
+  const em = (e: string): string => emojiPrefix(e, showEmoji);
+
+  const fields: Array<{ name: string; value: string; inline?: boolean }> = [];
+
+  fields.push({
+    name: t("fields.severity"),
+    value: `${em(severityEmoji)}${severity}`,
+    inline: true,
+  });
+
+  const pkgName = alert.security_vulnerability?.package?.name ?? alert.dependency?.package?.name;
+  if (pkgName) {
+    fields.push({
+      name: t("fields.package"),
+      value: pkgName,
+      inline: true,
+    });
+  }
+
+  if (alert.security_vulnerability?.vulnerable_version_range) {
+    const patched = alert.security_vulnerability.first_patched_version?.identifier;
+    fields.push({
+      name: t("fields.vulnerable_range"),
+      value: `${alert.security_vulnerability.vulnerable_version_range}${patched ? ` → fix: \`${patched}\`` : ""}`,
+      inline: false,
+    });
+  }
+
+  if (alert.security_advisory?.summary) {
+    fields.push({
+      name: t("fields.summary"),
+      value: alert.security_advisory.summary,
+      inline: false,
+    });
+  }
+
+  return buildMessage(
+    {
+      author,
+      title: t("events.dependabot.title", { repo: repo ?? t("common.repository"), action: al }),
+      url: alert.html_url,
+      color: GITHUB_COLORS[colorKey],
+      fields,
+    },
+    t,
+    repo,
+  );
+}