Sysdig Vulnerability to GitHub Issue to Slack

arazzo: 1.0.1
info:
  title: Sysdig Vulnerability to GitHub Issue to Slack
  summary: Pull a Sysdig vulnerability result, open a GitHub issue, then notify Slack.
  description: >-
    A DevSecOps workflow that lists vulnerability scan results from Sysdig
    Secure, opens a GitHub remediation issue for the finding, and notifies a
    Slack channel so the security team can prioritize a fix. Demonstrates
    chaining a container-security provider, a source-control provider, and a
    chat provider in a single Arazzo workflow.
  version: 1.0.0
sourceDescriptions:
  - name: sysdigSecure
    url: https://raw.githubusercontent.com/api-evangelist/sysdig/refs/heads/main/openapi/sysdig-vulnerabilities-api-openapi.yml
    type: openapi
  - name: githubIssues
    url: https://raw.githubusercontent.com/api-evangelist/github/refs/heads/main/openapi/_original/github-repo-issues-api-openapi.yml
    type: openapi
  - name: slackChat
    url: https://raw.githubusercontent.com/api-evangelist/slack/refs/heads/main/openapi/slack-chat-api-openapi.yml
    type: openapi
workflows:
  - workflowId: vuln-to-issue-to-slack
    summary: List a Sysdig vulnerability, open a GitHub issue, and notify Slack.
    description: >-
      Retrieves vulnerability results from Sysdig Secure, opens a GitHub
      remediation issue for the top finding, and posts a Slack message linking
      to the new issue.
    inputs:
      type: object
      properties:
        owner:
          type: string
        repo:
          type: string
        slackChannel:
          type: string
    steps:
      - stepId: list-vulns
        description: List vulnerability scan results from Sysdig Secure.
        operationId: $sourceDescriptions.sysdigSecure.listVulnerabilityResults
        successCriteria:
          - condition: $statusCode == 200
        outputs:
          vulnName: $response.body#/data/0/vulnName
          vulnSeverity: $response.body#/data/0/severity
      - stepId: open-issue
        description: Open a GitHub remediation issue for the vulnerability.
        operationId: $sourceDescriptions.githubIssues.createAnIssue
        requestBody:
          contentType: application/json
          payload:
            title: $steps.list-vulns.outputs.vulnName
            body: $steps.list-vulns.outputs.vulnSeverity
            labels:
              - security
              - sysdig
        successCriteria:
          - condition: $statusCode == 201
        outputs:
          issueNumber: $response.body#/number
          issueUrl: $response.body#/html_url
      - stepId: notify-slack
        description: Notify the security Slack channel with the issue link.
        operationId: $sourceDescriptions.slackChat.postChatPostmessage
        requestBody:
          contentType: application/json
          payload:
            channel: $inputs.slackChannel
            text: $steps.open-issue.outputs.issueUrl
        successCriteria:
          - condition: $statusCode == 200
        outputs:
          messageTs: $response.body#/ts
    outputs:
      vulnName: $steps.list-vulns.outputs.vulnName
      issueNumber: $steps.open-issue.outputs.issueNumber
      issueUrl: $steps.open-issue.outputs.issueUrl
      messageTs: $steps.notify-slack.outputs.messageTs