implement NPM

Signed-off-by: Jefferson <jefferson.rios.caro@gmail.com>

Author: riosje

.github/ISSUE_TEMPLATE.md

@@ -1,7 +1,8 @@
 ---
 title: "{{ env.VULN_ID }} ({{ env.VULN_DEP_NAME }}) found on {{ env.NODEJS_STREAM }}"
 asignees:
-labels: "{{ env.ISSUE_LABELS }}"
+labels:
+{{ env.ISSUE_LABELS }}
 ---
 
 A new vulnerability for {{ env.VULN_DEP_NAME }} {{ env.VULN_DEP_VERSION }} was found:

.github/workflows/check-vulns.yml

@@ -90,28 +90,47 @@ jobs:
       - name: Build labels for issue
         id: build_labels
         run: |
-          # Start with base labels
-          LABELS="${{ inputs.nsolidStream }}"
+          # Start with base labels array
+          LABELS_ARRAY=()
+          LABELS_ARRAY+=("${{ inputs.nsolidStream }}")
           
           # Add NPM label if it's an npm vulnerability
           if [ "${{ matrix.vulnerabilities.source }}" = "npm" ]; then
-            LABELS="${LABELS}, NPM"
+            LABELS_ARRAY+=("NPM")
           fi
           
           # Add severity label if available
           if [ -n "${{ matrix.vulnerabilities.severity }}" ] && [ "${{ matrix.vulnerabilities.severity }}" != "null" ]; then
             SEVERITY=$(echo "${{ matrix.vulnerabilities.severity }}" | tr '[:lower:]' '[:upper:]')
-            LABELS="${LABELS}, ${SEVERITY}"
+            LABELS_ARRAY+=("${SEVERITY}")
           fi
           
           # Extract runtime version from stream (e.g., node-v20.x-nsolid-v5.x -> v20.x)
           RUNTIME_VERSION=$(echo "${{ inputs.nsolidStream }}" | sed -n 's/.*node-\(v[0-9]*\.x\).*/\1/p')
           if [ -n "$RUNTIME_VERSION" ]; then
-            LABELS="${LABELS}, ${RUNTIME_VERSION}"
+            LABELS_ARRAY+=("${RUNTIME_VERSION}")
           fi
           
-          echo "ISSUE_LABELS=${LABELS}" >> $GITHUB_ENV
-          echo "Generated labels: ${LABELS}"
+          # Extract nsolid version from stream (e.g., node-v20.x-nsolid-v5.x -> v5.x)
+          NSOLID_VERSION=$(echo "${{ inputs.nsolidStream }}" | sed -n 's/.*nsolid-\(v[0-9]*\.x\).*/\1/p')
+          if [ -n "$NSOLID_VERSION" ]; then
+            LABELS_ARRAY+=("nsolid-${NSOLID_VERSION}")
+          fi
+          
+          # Join array elements with newlines for proper YAML array format
+          LABELS_YAML=""
+          for label in "${LABELS_ARRAY[@]}"; do
+            if [ -z "$LABELS_YAML" ]; then
+              LABELS_YAML="$label"
+            else
+              LABELS_YAML="$LABELS_YAML\n$label"
+            fi
+          done
+          
+          echo "ISSUE_LABELS<<EOF" >> $GITHUB_ENV
+          echo -e "$LABELS_YAML" >> $GITHUB_ENV
+          echo "EOF" >> $GITHUB_ENV
+          echo "Generated labels: ${LABELS_ARRAY[*]}"
       - uses: dblock/create-a-github-issue@v3
         with:
           update_existing: false