checker.yml

name: Checker

on:
  workflow_dispatch:

permissions:
  contents: read
  issues: write

jobs:
  check:
    runs-on: ubuntu-latest
    outputs:
      CVEs: ${{ steps.validator.outputs.CVEs }}
    steps:
      - uses: actions/checkout@v3

      - name: Use Node.js
        uses: actions/setup-node@v3
        with:
          node-version: '20.x'

      - name: Install
        run: |
          npm install

      - name: Run validator
        id: validator
        env:
          API_KEY: ${{ secrets.API_KEY }}
        run: |
          node index.js

  create-issues:
    needs: check
    if: ${{ success() }}
    runs-on: ubuntu-latest
    strategy:
      matrix: ${{ fromJson(needs.check.outputs.CVEs) }}
      max-parallel: 1
    steps:
      - uses: actions/checkout@v3
      - uses: dblock/create-a-github-issue@v3
        with:
          update_existing: false
          search_existing: all
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          CVE_ID: ${{ matrix.cveID }}
          ACTION_URL: "https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}"