implement NPM

Signed-off-by: Jefferson <jefferson.rios.caro@gmail.com>

Author: riosje

.github/ISSUE_TEMPLATE.md

@@ -1,6 +1,11 @@
 ---
 title: "{{ env.VULN_ID }} ({{ env.VULN_DEP_NAME }}) found on {{ env.NODEJS_STREAM }}"
-labels: {{ env.ISSUE_LABELS }}
+labels:
+  - "{{ env.NODEJS_STREAM }}"
+  {% if env.VULN_SOURCE == 'npm' %}- "NPM"{% endif %}
+  {% if env.VULN_SEVERITY and env.VULN_SEVERITY != 'null' %}- "{{ env.VULN_SEVERITY | upper }}"{% endif %}
+  {% if env.RUNTIME_VERSION %}- "{{ env.RUNTIME_VERSION }}"{% endif %}
+  {% if env.NSOLID_VERSION %}- "nsolid-{{ env.NSOLID_VERSION }}"{% endif %}
 assignees:
 ---
 

.github/workflows/check-vulns.yml

@@ -100,7 +100,9 @@ jobs:
           echo "Source: ${{ matrix.vulnerabilities.source }}"
           echo "Labels: ${{ join(matrix.vulnerabilities.labels, ', ') }}"
           echo "ISSUE_LABELS (comma-separated): ${{ join(matrix.vulnerabilities.labels, ', ') }}"
-          echo "ISSUE_LABELS_YAML: ${{ matrix.vulnerabilities.labels_yaml }}"
+          echo "VULN_SEVERITY: ${{ matrix.vulnerabilities.severity }}"
+          echo "RUNTIME_VERSION: ${{ matrix.vulnerabilities.runtime_version }}"
+          echo "NSOLID_VERSION: ${{ matrix.vulnerabilities.nsolid_version }}"
       - uses: dblock/create-a-github-issue@v3
         with:
           update_existing: false
@@ -109,7 +111,9 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           VULN_ID: ${{ matrix.vulnerabilities.id }}
           VULN_URL: ${{ matrix.vulnerabilities.url }}
-          ISSUE_LABELS: ${{ matrix.vulnerabilities.labels_yaml }}
+          VULN_SEVERITY: ${{ matrix.vulnerabilities.severity }}
+          RUNTIME_VERSION: ${{ matrix.vulnerabilities.runtime_version }}
+          NSOLID_VERSION: ${{ matrix.vulnerabilities.nsolid_version }}
           VULN_DEP_NAME: ${{ matrix.vulnerabilities.dependency }}
           VULN_DEP_VERSION: ${{ matrix.vulnerabilities.version }}
           VULN_SOURCE: ${{ matrix.vulnerabilities.source }}

.github/workflows/format_matrix.py

@@ -53,6 +53,13 @@ def build_vulnerability_matrix(vulnerabilities_data: Dict[str, Any], nsolid_stre
 
     matrix_include = []
 
+    # Extract runtime and nsolid versions from stream
+    runtime_match = re.search(r'node-(v[0-9]+\.x)', nsolid_stream)
+    runtime_version = runtime_match.group(1) if runtime_match else ""
+    
+    nsolid_match = re.search(r'nsolid-(v[0-9]+\.x)', nsolid_stream)
+    nsolid_version = nsolid_match.group(1) if nsolid_match else ""
+    
     for vuln in vulnerabilities:
         labels = generate_labels_for_vulnerability(vuln, nsolid_stream)
 
@@ -63,7 +70,8 @@ def build_vulnerability_matrix(vulnerabilities_data: Dict[str, Any], nsolid_stre
             "version": vuln["version"],
             "source": vuln["source"],
             "labels": labels,
-            "labels_yaml": "[" + ", ".join([f'"{label}"' for label in labels]) + "]"
+            "runtime_version": runtime_version,
+            "nsolid_version": nsolid_version
         }
 
         # Add npm-specific fields if they exist