fix(scan): resolve TypeScript errors from merged PRs

Add missing reachMinSeverity property to reach configuration objects
in handle-ci.mts and create-scan-from-github.mts. Convert spinner type
from null to undefined using nullish coalescing in reachability
analysis calls. Fix spawnSync usage in provider-factory.mts to handle
Buffer/string stdout properly without encoding option.

Related to PR #811 and PR #827.

Author: jdalton

packages/cli/src/commands/ci/handle-ci.mts

@@ -53,6 +53,7 @@ export async function handleCi(autoManifest: boolean): Promise<void> {
       reachDisableAnalytics: false,
       reachEcosystems: [],
       reachExcludePaths: [],
+      reachMinSeverity: '',
       reachSkipCache: false,
       runReachabilityAnalysis: false,
     },

packages/cli/src/commands/scan/create-scan-from-github.mts

@@ -258,6 +258,7 @@ async function scanOneRepo(
       reachAnalysisMemoryLimit: 0,
       reachEcosystems: [],
       reachExcludePaths: [],
+      reachMinSeverity: '',
       reachSkipCache: false,
     },
     readOnly: false,

packages/cli/src/commands/scan/handle-create-new-scan.mts

@@ -166,7 +166,7 @@ export async function handleCreateNewScan({
       packagePaths,
       reachabilityOptions: reach,
       repoName,
-      spinner,
+      spinner: spinner ?? undefined,
       target: targets[0]!,
     })
 

packages/cli/src/commands/scan/handle-scan-reach.mts

@@ -81,7 +81,7 @@ export async function handleScanReach({
     outputPath,
     packagePaths,
     reachabilityOptions,
-    spinner,
+    spinner: spinner ?? undefined,
     target: targets[0]!,
     uploadManifests: true,
   })

packages/cli/src/utils/git/provider-factory.mts

@@ -38,12 +38,15 @@ export function createPrProvider(): PrProvider {
 export function getGitRemoteUrlSync(): string {
   try {
     const result = spawnSync('git', ['config', '--get', 'remote.origin.url'], {
-      encoding: 'utf8',
       stdio: ['pipe', 'pipe', 'pipe'],
     })
 
     if (result.status === 0 && result.stdout) {
-      return result.stdout.trim().toLowerCase()
+      const remoteUrl =
+        typeof result.stdout === 'string'
+          ? result.stdout
+          : result.stdout.toString('utf8')
+      return remoteUrl.trim().toLowerCase()
     }
   } catch {
     // Ignore errors - will fall back to GitHub.