Philipp 599b74ef49 refactor(action): replace bash blocks with zero-dependency Node.js modules ...

Extract ~450 lines of complex bash from action.yaml into modular,
unit-tested Node.js scripts in lib/. All logic is covered by 26 native
node:test unit tests (node --test, no external dependencies).

Modules added:
- lib/platforms.js   - platform parsing and OCI manifest auto-discovery
- lib/distro.js      - SPDX PURL distro detection (os_name/os_version)
- lib/verifier.js    - Trivy arch mapping and SHA256 verification
- lib/diagnostics.js - CI terminal diagnostic formatters
- lib/install-trivy.js  - Trivy install/verify entrypoint (replaces bash step)
- lib/extract-sboms.js  - SBOM extraction entrypoint (replaces bash step)
- lib/scan-sboms.js     - SBOM scan + diff entrypoint (replaces bash step)

Tests added (all pass, auto-discovered by
ode --test):
- test/platforms.test.js
- test/distro.test.js
- test/verifier.test.js
- test/diagnostics.test.js
- test/orchestration.test.js

action.yaml shrinks from 554 to 107 lines. Inputs are bridged to Node
scripts via INPUT_* env vars so modules are fully decoupled from the
Actions runner and testable in isolation.

2026-09-15 00:34:23 +02:00

..

diagnostics.js

refactor(action): replace bash blocks with zero-dependency Node.js modules

2026-09-15 00:34:23 +02:00

distro.js

refactor(action): replace bash blocks with zero-dependency Node.js modules

2026-09-15 00:34:23 +02:00

extract-sboms.js

refactor(action): replace bash blocks with zero-dependency Node.js modules

2026-09-15 00:34:23 +02:00

install-trivy.js

refactor(action): replace bash blocks with zero-dependency Node.js modules

2026-09-15 00:34:23 +02:00

platforms.js

refactor(action): replace bash blocks with zero-dependency Node.js modules

2026-09-15 00:34:23 +02:00

scan-sboms.js

refactor(action): replace bash blocks with zero-dependency Node.js modules

2026-09-15 00:34:23 +02:00

verifier.js

refactor(action): replace bash blocks with zero-dependency Node.js modules

2026-09-15 00:34:23 +02:00