pi-lens/dist/clients/project-diagnostics/runner-adapters/opengrep.js

Real-time code feedback for pi — LSP, linters, formatters, type-checking, structural analysis & booboo

import * as path from "node:path";
/**
 * opengrep's `extra.severity` is semgrep-compatible: `ERROR` / `WARNING` /
 * `INFO` (verified against the real installed 1.25.0 binary's `--json`
 * output). `ERROR` is treated as blocking — the same convention gitleaks
 * secrets and knip's "unlisted dependency" findings use.
 */
function severityFor(raw) {
    switch (raw.toUpperCase()) {
        case "ERROR":
            return { severity: "error", blocking: true };
        case "INFO":
            return { severity: "info", blocking: false };
        default:
            return { severity: "warning", blocking: false };
    }
}
export function opengrepFindingToProjectDiagnostic(cwd, finding) {
    const { severity, blocking } = severityFor(finding.severity);
    const cweSuffix = finding.cwe?.length ? ` (${finding.cwe[0]})` : "";
    return {
        filePath: path.isAbsolute(finding.path)
            ? finding.path
            : path.resolve(cwd, finding.path),
        line: finding.startLine,
        column: finding.startCol,
        severity,
        semantic: blocking ? "blocking" : "warning",
        tool: "opengrep",
        runner: "opengrep",
        rule: `opengrep:${finding.checkId}`,
        message: `${finding.message}${cweSuffix}`,
        source: "project-scan",
    };
}
export function opengrepResultToProjectDiagnostics(cwd, result) {
    if (!result.success || result.findings.length === 0)
        return [];
    return result.findings.map((finding) => opengrepFindingToProjectDiagnostic(cwd, finding));
}