Fix bugs in scorecard

dist/index.js

@@ -1001,13 +1001,21 @@ const packageurl_js_1 = __nccwpck_require__(8915);
 const core = __importStar(__nccwpck_require__(2186));
 function getScorecardLevels(changes) {
     return __awaiter(this, void 0, void 0, function* () {
+        const data = { dependencies: [] };
         for (const change of changes) {
             const purl = packageurl_js_1.PackageURL.fromString(change.package_url);
             const ecosystem = purl.type;
             const packageName = purl.name;
             const version = purl.version;
-            return getDepsDevData(ecosystem, packageName, String(version));
+            data.dependencies.push({
+                purl: purl,
+                ecosystem: ecosystem,
+                packageName: packageName,
+                version: version,
+                depsDevData: yield getDepsDevData(ecosystem, packageName, version)
+            });
         }
+        return data;
     });
 }
 exports.getScorecardLevels = getScorecardLevels;
@@ -1022,7 +1030,7 @@ function getDepsDevData(ecosystem, packageName, version) {
                 const data = yield response.json();
                 const projects = data.relatedProjects;
                 for (const project of projects) {
-                    return getDepsDevProjectData(project.projectKey);
+                    return yield getDepsDevProjectData(project.projectKey);
                 }
             }
             else {
@@ -1032,6 +1040,7 @@ function getDepsDevData(ecosystem, packageName, version) {
         catch (error) {
             core.error(`Error fetching data: ${error.message}`);
         }
+        return {};
     });
 }
 function getDepsDevProjectData(projectKey) {

src/scorecard.ts

@@ -3,14 +3,23 @@ import {isSPDXValid, octokitClient} from './utils'
 import {PackageURL} from 'packageurl-js'
 import * as core from '@actions/core'
 
-export async function getScorecardLevels(changes: Change[]): Promise<any> {
+export async function getScorecardLevels(changes: Change[]): Promise<object> {
+  const data: any = {dependencies: []}
   for (const change of changes) {
     const purl = PackageURL.fromString(change.package_url)
     const ecosystem = purl.type
     const packageName = purl.name
     const version = purl.version
-    return getDepsDevData(ecosystem, packageName, String(version))
+
+    data.dependencies.push({
+      purl: purl,
+      ecosystem: ecosystem,
+      packageName: packageName,
+      version: version,
+      depsDevData: await getDepsDevData(ecosystem, packageName, version)
+    })
   }
+  return data;
 }
 
 const depsDevAPIRoot = 'https://api.deps.dev'
@@ -18,8 +27,8 @@ const depsDevAPIRoot = 'https://api.deps.dev'
 async function getDepsDevData(
   ecosystem: String,
   packageName: String,
-  version: String
+  version: any
-): Promise<any> {
+): Promise<object> {
   try {
     core.debug(`Getting deps.dev data for ${packageName} ${version}`)
     const url = `${depsDevAPIRoot}//v3alpha/systems/${ecosystem}/packages/${packageName}/versions/${version}`
@@ -28,7 +37,7 @@ async function getDepsDevData(
       const data = await response.json()
       const projects = data.relatedProjects
       for (const project of projects) {
-        return getDepsDevProjectData(project.projectKey)
+        return await getDepsDevProjectData(project.projectKey)
       }
     } else {
       throw new Error(`Failed to fetch data with status code: ${response.status}`)
@@ -36,6 +45,7 @@ async function getDepsDevData(
   } catch (error: any) {
     core.error(`Error fetching data: ${error.message}`)
   }
+  return {}
 }
 
 async function getDepsDevProjectData(