1.1.0

index.js

@@ -25,40 +25,53 @@ async function readAudit() {
 
 
 const severities = {
-  info: 'INFO',
+  info: 'LOW',
-  low: 'MINOR',
+  low: 'LOW',
-  moderate: 'MINOR',
+  moderate: 'MEDIUM',
-  high: 'CRITICAL',
+  high: 'MEDIUM',
-  critical: 'BLOCKER',
+  critical: 'HIGH',
 };
 
 
 async function main() {
   const pnpmAudit = await readAudit()
+  const rules = []
   const issues = []
   for (const advice of Object.values(pnpmAudit.advisories || [])) {
-    issues.push({
+    rules.push({
-      "engineId": "pnpm-audit",
+      id: `${advice.id}`,
-      "ruleId": advice.id,
+      name: advice.github_advisory_id || advice.npm_advisory_id || `rule_${advice.id}`,
-      "severity": severities[advice.severity],
+      description: `<h1>${advice.module_name} ${advice.vulnerable_versions}</h1>
-      "type": "VULNERABILITY",
+<h2>${advice.title || ''}</h2>
-      "efforMinutes": 0,
-      "primaryLocation": {
-        "message": `${advice.module_name} ${advice.vulnerable_versions}
-${advice.title || ''}
 
 Overview:
+<pre>
 ${advice.overview || ''}
+</pre>
 
 References:
+<pre>
 ${advice.references || ''}
+</pre>
 `,
-        "filePath": "pnpm-lock.yaml",
+      cleanCodeAttribute: "TRUSTWORTHY",
+      engineId: "pnpm-audit",
+      impacts: [{
+        softwareQuality: "SECURITY",
+        severity: severities[advice.severity],
+      }]
+    })
+    issues.push({
+      ruleId: `${advice.id}`,
+      efforMinutes: 0,
+      primaryLocation: {
+        message: advice.title,
+        filePath: "pnpm-lock.yaml",
       },
-      "secondaryLocations": []
+      secondaryLocations: []
     })
   }
-  console.log(JSON.stringify({ issues }, null, 2))
+  console.log(JSON.stringify({ rules, issues }, null, 2))
 }
 
 main()

package.json

@@ -1,6 +1,6 @@
 {
   "name": "pnpm-audit-sonar",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "Convert PNPM audit to Sonar compatible format",
   "main": "index.js",
   "scripts": {