List instances of a code scanning alert

type Github = {

  token: string;

};

/**

 * List instances of a code scanning alert

 * Lists all instances of the specified code scanning alert.

You must use an access token with the `security_events` scope to use this endpoint with private repos,

the `public_repo` scope also grants permission to read security events on public repos only.

GitHub Apps must have the `security_events` read permission to use this endpoint.

 */

export async function main(

  auth: Github,

  owner: string,

  repo: string,

  alert_number: string,

  page: string | undefined,

  per_page: string | undefined,

  ref: string | undefined

) {

  const url = new URL(

    `https://api.github.com/repos/${owner}/${repo}/code-scanning/alerts/${alert_number}/instances`

  );

  for (const [k, v] of [

    ["page", page],

    ["per_page", per_page],

    ["ref", ref],

  ]) {

    if (v !== undefined && v !== "") {

      url.searchParams.append(k, v);

    }

  }

  const response = await fetch(url, {

    method: "GET",

    headers: {

      Authorization: "Bearer " + auth.token,

    },

    body: undefined,

  });

  if (!response.ok) {

    const text = await response.text();

    throw new Error(`${response.status} ${text}`);

  }

  return await response.json();

}