List locations for a secret scanning alert

type Github = {

  token: string;

};

/**

 * List locations for a secret scanning alert

 * Lists all locations for a given secret scanning alert for an eligible repository.

To use this endpoint, you must be an administrator for the repository or for the organization that owns the repository, and you must use a personal access token with the `repo` scope or `security_events` scope.

For public repositories, you may instead use the `public_repo` scope.

GitHub Apps must have the `secret_scanning_alerts` read permission to use this endpoint.

 */

export async function main(

  auth: Github,

  owner: string,

  repo: string,

  alert_number: string,

  page: string | undefined,

  per_page: string | undefined

) {

  const url = new URL(

    `https://api.github.com/repos/${owner}/${repo}/secret-scanning/alerts/${alert_number}/locations`

  );

  for (const [k, v] of [

    ["page", page],

    ["per_page", per_page],

  ]) {

    if (v !== undefined && v !== "") {

      url.searchParams.append(k, v);

    }

  }

  const response = await fetch(url, {

    method: "GET",

    headers: {

      Authorization: "Bearer " + auth.token,

    },

    body: undefined,

  });

  if (!response.ok) {

    const text = await response.text();

    throw new Error(`${response.status} ${text}`);

  }

  return await response.json();

}