Include API actions in JSON findings

Expose the Socket API action on selected standard JSON findings while preserving legacy Issue serialization, equality, alert selection, and process exit behavior. Verify both real SDK transport paths with the local HTTP fixture.

Assisted-by: Codex:gpt-6-luna

Author: jdalton

docs/cli-reference.md

@@ -349,6 +349,13 @@ Either field is JSON null when its source value is unavailable. The existing
 are distinct from the scan-reference URLs above and do not identify an
 individual alert or triage page.
 
+Each selected alert also includes `action`, the scalar action returned by the
+Socket API, such as `error`, `warn`, `monitor`, or `ignore`. It is JSON null
+when no action is available. Existing alert selection is unchanged: standard
+output includes new error and warning findings, and `--strict-blocking` also
+includes unchanged error and warning findings. The action field does not
+change the CLI process exit code.
+
 Standard Socket JSON also includes four package-change arrays:
 `new_packages`, `updated_packages`, `removed_packages`, and `replaced_packages`.
 Rows contain `id`, `name`, `version`, `ecosystem`, `direct`, `author`, `size`,

socketsecurity/core/__init__.py

@@ -2836,6 +2836,11 @@ def add_package_alerts_to_collection(self, package: Package, alerts_collection:
                 pkg_type=package.type,
                 pkg_name=package.name,
                 pkg_version=package.version,
+                api_action=(
+                    alert_item.get("action")
+                    if isinstance(alert_item.get("action"), str)
+                    else None
+                ),
                 pkg_id=package.id,
                 props=alert.props,
                 key=alert.key,

socketsecurity/core/classes.py

@@ -322,12 +322,15 @@ class Issue:
     # introduced_by chain, but its manifest is still known.
     manifest_files: list
     direct: bool
+    api_action: Optional[str]
 
     def __init__(self, **kwargs):
         if kwargs:
             for key, value in kwargs.items():
                 setattr(self, key, value)
 
+        if not hasattr(self, "api_action"):
+            self.api_action = None
         if hasattr(self, "created_at"):
             self.created_at = self.created_at.strip(" (Coordinated Universal Time)")
         if not hasattr(self, "manifest_files"):
@@ -355,13 +358,22 @@ def __init__(self, **kwargs):
             self.ignore = False
 
     def __str__(self):
-        return json.dumps(self.__dict__)
+        return json.dumps(self.to_dict())
+
+    def to_dict(self) -> dict[str, object]:
+        result = dict(self.__dict__)
+        result.pop("api_action", None)
+        return result
 
     def __eq__(self, other):
-        return self.__dict__ == other.__dict__
+        other_dict = dict(other.__dict__)
+        other_dict.pop("api_action", None)
+        return self.to_dict() == other_dict
 
     def __ne__(self, other):
-        return self.__dict__ != other.__dict__
+        other_dict = dict(other.__dict__)
+        other_dict.pop("api_action", None)
+        return self.to_dict() != other_dict
 
 
 class YamlFile:
@@ -642,9 +654,13 @@ def to_dict(self) -> dict:
             "new_capabilities": self.new_capabilities,
             "removed_packages": [p.to_dict() for p in self.removed_packages],
             "replaced_packages": [p.to_dict() for p in self.replaced_packages],
-            "new_alerts": [alert.__dict__ for alert in self.new_alerts],
-            "unchanged_alerts": [alert.__dict__ for alert in self.unchanged_alerts] if hasattr(self, "unchanged_alerts") else [],
-            "removed_alerts": [alert.__dict__ for alert in self.removed_alerts] if hasattr(self, "removed_alerts") else [],
+            "new_alerts": [alert.to_dict() for alert in self.new_alerts],
+            "unchanged_alerts": [alert.to_dict() for alert in self.unchanged_alerts]
+            if hasattr(self, "unchanged_alerts")
+            else [],
+            "removed_alerts": [alert.to_dict() for alert in self.removed_alerts]
+            if hasattr(self, "removed_alerts")
+            else [],
             "id": self.id,
             "sbom": self.sbom if hasattr(self, "sbom") else [],
             "packages": {k: v.to_dict() for k, v in self.packages.items()} if hasattr(self, "packages") else {},

socketsecurity/core/report_output.py

@@ -142,7 +142,12 @@ def build_socket_json_report(
     )
     selected_diff = clone_diff_with_selected_alerts(diff_report, selected_alerts)
     report = Messages.create_security_comment_json(selected_diff)
-    for alert_row in report["new_alerts"]:
+    for issue, alert_row in zip(
+        selected_alerts,
+        report["new_alerts"],
+        strict=True,
+    ):
+        alert_row["action"] = issue.api_action
         package_url = alert_row.get("url")
         alert_type = alert_row.get("type")
         links = build_alert_links(