Combine audit and list reports; refactoring.

This is headed toward being a shared GitHub Action, so it can be run on
both the old code and the new/latest code (without copying and pasting...).

Author: BigBlueHat

.github/workflows/osv-scanner-pr.yaml

@@ -143,6 +143,22 @@ jobs:
           echo "$LIST" >> $GITHUB_OUTPUT
           echo "$delimiter" >> $GITHUB_OUTPUT
         continue-on-error: true
+      - name: combine npm audit/list reports
+        id: combined_report
+        run: |
+          # Use a random delimiter to capture the multi-line output
+          delimiter=$(openssl rand -hex 8)
+          echo "result<<$delimiter" >> $GITHUB_OUTPUT
+          echo "
+            ### npm audit
+
+            ${{ steps.audit_report.outputs.result }}
+
+            ### npm list
+
+            ${{ steps.list_report.outputs.result }}
+          " >> $GITHUB_OUTPUT
+          echo "$delimiter" >> $GITHUB_OUTPUT
 
       # Combine OSV, npm audit, and npm list output into a single comment
       - name: Add a comment containing OSV, npm audit, and npm list output
@@ -152,23 +168,10 @@ jobs:
             ## Vulnerability results from base branch
             ${{ steps.old.outputs.content }}
 
-            ### npm audit
-
-            ${{ steps.audit_report.outputs.result }}
-
-            ### npm list
-
-            ${{ steps.list_report.outputs.result }}
-
+            ${{ steps.combined_report.outputs.content }}
             ---
 
             ## Vulnerability results from current PR branch
             ${{ steps.new.outputs.content }}
 
-            ### npm audit
-
-            ${{ steps.audit_report.outputs.result }}
-
-            ### npm list
-
-            ${{ steps.list_report.outputs.result }}
+            ${{ steps.combined_report.outputs.content }}