sonarcloud-security-updatinglisted
Install: claude install-skill NASA-PDS/pds-agent-skills
# SonarCloud Security Updating Skill
This skill applies triage decisions to SonarCloud security issues (vulnerabilities and hotspots) by reading JSON or CSV files with review decisions and updating the statuses in SonarCloud via the API.
## Prerequisites
- Node.js v18 or higher
- SonarCloud API token with **Administer Security Hotspots** and **Administer Issues** permissions
- **JSON file with triage decisions (RECOMMENDED)** - output from `sonarcloud-security-triaging` skill
- Or CSV file with triage columns (legacy format)
## Workflow
This skill complements the export and triage skills:
### JSON Workflow (Recommended)
1. **Export** → `sonarcloud-security-exporting` generates JSON with rich data
2. **Triage** → `sonarcloud-security-triaging` populates triage fields
3. **Apply** → This skill reads triage decisions from JSON and updates SonarCloud
### CSV Workflow (Legacy)
1. **Export** → `sonarcloud-security-exporting` generates CSV
2. **Review** → User adds triage columns in spreadsheet (Action, Resolution, Comment, Reviewer)
3. **Apply** → This skill reads CSV and updates SonarCloud
## Input Formats
### JSON Format (Recommended)
The JSON file should contain issues with populated `triage` fields (output from `sonarcloud-security-triaging` skill):
```json
{
"exportMetadata": { ... },
"issues": [
{
"key": "AZPV1fTprahIrD-njDRb",
"project": "NASA-PDS_doi-ui",
"type": "SECURITY_HOTSPOT",
"url": "https://sonarcloud.io/...",
"tria