Github

GitHub models for swamp. @hivemq/github/token audits a single GitHub token. A token model instance is bound to one token (supplied inline or read from a file at audit time). Its audit method calls the API as that token and records validity, the token type inferred from the secret prefix (classic PAT, fine-grained PAT, OAuth, GitHub App user/installation), the issuing app (OAuth client id), and the acting identity (login and account), so you can identify what a token is and where it came from without exposing its value. @hivemq/github/dependabot/alerts, @hivemq/github/code-scanning/alerts, and @hivemq/github/secret-scanning/alerts mirror the corresponding /repos/{owner}/{repo}//alerts endpoints: each list method fetches a set of repos' open alerts and writes one normalized resource per repo ({number, htmlUrl, title, severity}, plus unavailable/truncated markers). The bundled @hivemq/github-security-alerts workflow report merges the three models' resources from one workflow run into per-repo Slack Block Kit payloads, ready to post via a Slack model. @hivemq/github/security-alerts merges one run of the three alert models (wired in as their run aggregates via workflow CEL) into gated per-repo Slack payloads: its build method verifies every requested repo is covered by every scanner, fails loud on gaps, and writes payloads with JSON-stringified blocks ready for a Slack model's postBlocks.