Release v1.0.0

src/main.ts

@@ -0,0 +1,96 @@
+import * as process from 'process';
+import * as os from 'os';
+
+import * as core from '@actions/core';
+import * as github from '@actions/github';
+
+import { Cargo } from '@actions-rs/core';
+
+import * as input from './input';
+import * as interfaces from './interfaces';
+import * as reporter from './reporter';
+
+const pkg = require('../package.json'); // eslint-disable-line @typescript-eslint/no-var-requires
+
+const USER_AGENT = `${pkg.name}/${pkg.version} (${pkg.bugs.url})`;
+
+async function getData(): Promise<interfaces.Report> {
+    const cargo = await Cargo.get();
+    await cargo.findOrInstall('cargo-audit');
+
+    await cargo.call(['generate-lockfile']);
+
+    let stdout = '';
+    try {
+        core.startGroup('Calling cargo-audit (JSON output)');
+        await cargo.call(['audit', '--json'], {
+            ignoreReturnCode: true,
+            listeners: {
+                stdout: buffer => {
+                    stdout += buffer.toString();
+                },
+            },
+        });
+    } finally {
+        // Cool story: `cargo-audit` JSON output is missing the trailing `\n`,
+        // so the `::endgroup::` annotation from the line below is being
+        // eaten by it.
+        // Manually writing the `\n` to denote the `cargo-audit` end
+        process.stdout.write(os.EOL);
+        core.endGroup();
+    }
+
+    return JSON.parse(stdout);
+}
+
+export async function run(actionInput: input.Input): Promise<void> {
+    const report = await getData();
+    let shouldReport = false;
+    if (!report.vulnerabilities.found) {
+        core.info('No vulnerabilities were found');
+    } else {
+        core.warning(`${report.vulnerabilities.count} vulnerabilities found!`);
+        shouldReport = true;
+    }
+
+    if (report.warnings.length === 0) {
+        core.info('No warnings were found');
+    } else {
+        core.warning(`${report.warnings.length} warnings found!`);
+        shouldReport = true;
+    }
+
+    if (!shouldReport) {
+        return;
+    }
+
+    const client = new github.GitHub(actionInput.token, {
+        userAgent: USER_AGENT,
+    });
+    const advisories = report.vulnerabilities.list.concat(report.warnings);
+    if (github.context.eventName == 'schedule') {
+        core.debug(
+            'Action was triggered on a schedule event, creating an Issues report',
+        );
+        await reporter.reportIssues(client, advisories);
+    } else {
+        core.debug(
+            `Action was triggered on a ${github.context.eventName} event, creating a Check report`,
+        );
+        await reporter.reportCheck(client, advisories);
+    }
+}
+
+async function main(): Promise<void> {
+    const actionInput = input.get();
+
+    try {
+        await run(actionInput);
+    } catch (error) {
+        core.setFailed(error.message);
+    }
+
+    return;
+}
+
+main();