Update Security-Notification.yml

Author: antoniomorello-DB

.github/workflows/Security-Notification.yml

@@ -49,17 +49,24 @@ jobs:
           # 4. Extract details from the first alert found
           PACKAGE=$(echo "$ALERTS" | jq -r '.[0] | .dependency.package.name')
           SEVERITY=$(echo "$ALERTS" | jq -r '.[0] | .security_advisory.severity')
-          URL=$(echo "$ALERTS" | jq -r '.[0] | .html_url')
           STATE=$(echo "$ALERTS" | jq -r '.[0] | .state')
 
-          # 5. Send Slack Notification
-            # Build message text using jq to safely handle user input
+          REPO_NAME: ${{ github.repository }}
+          SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
+          
+          ISSUE_TITLE=$(echo "$ALERTS" | jq -r '.[0] | .dependency.package.name + " (" + .security_advisory.severity + ")"')
+          ISSUE_USER="Dependabot"
+          ISSUE_URL=$(echo "$ALERTS" | jq -r '.[0] | .html_url')
+          
+          # FIX: We pass the template string as an argument (--arg template) 
+          # This prevents the "syntax error: unexpected '*'" because jq doesn't try to parse the asterisks as code.
           MESSAGE_TEXT=$(jq -n \
             --arg repo "$REPO_NAME" \
             --arg title "$ISSUE_TITLE" \
             --arg user "$ISSUE_USER" \
             --arg url "$ISSUE_URL" \
-            '*📢 New Dependabot Alert \($repo) 📢*\n\n*Issue Title:* \($title)\n*Opened By:* \($user)\n\n*View Issue:* \($url)')
+            --arg template "*📢 New Dependabot Alert ($REPO_NAME) 📢*\n\n*Issue Title:* $ISSUE_TITLE\n*Opened By:* $ISSUE_USER\n\n*View Issue:* $ISSUE_URL" \
+            '$template')
 
           # Build Slack payload
           SLACK_PAYLOAD=$(jq -n \