Switch to JS action

Author: kpk47

actions/installer/action.yml

@@ -17,40 +17,10 @@ description: 'Installs SLSA verifier and adds it to your PATH'
 branding:
   icon: 'package'
   color: 'blue'
+inputs:
+  github-token:
+    description: 'GitHub token'
+    required: true
 runs:
-  using: 'composite'
-  steps:
-    - name: Get Action Ref
-      shell: bash
-      env:
-        ACTION_REF: "${{ github.action_ref }}"
-      run: echo "action_ref=$ACTION_REF" >> $GITHUB_ENV
-    - name: Checkout
-      uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0
-      with:
-        repository: "slsa-framework/slsa-verifier"
-        ref: "${{ env.action_ref }}"
-    - name: Setup Node.js 16
-      uses: actions/setup-node@969bd2663942d722d85b6a8626225850c2f7be4b # tag=v3.5.0
-      with:
-        node-version: 16
-
-    - name: Install dependencies
-      working-directory: actions/installer
-      shell: bash
-      run: npm ci
-
-    - name: Run build
-      working-directory: actions/installer
-      shell: bash
-      run: npm run build
-
-    - name: Run installer
-      env:
-        ACTION_REF: "${{ github.action_ref }}"
-        TOKEN: "${{ github.token }}"
-        REPOSITORY: "${{ github.repository }}"
-      working-directory: actions/installer/dist
-      shell: bash
-      run: npm start
-      
+  using: 'node16'
+  main: 'dist/index.js'

actions/installer/dist/index.js

@@ -81,7 +81,7 @@ function getVerifierVersion(actionRef) {
         // If actionRef is a commit SHA, then find the associated version number.
         const shaRe = /^[a-f\d]{40}$/;
         if (shaRe.test(actionRef)) {
-            const octokit = github.getOctokit(process.env.TOKEN || "");
+            const octokit = github.getOctokit(core.getInput('github-token'));
             const { data: tags } = yield octokit.request("GET /repos/{owner}/{repository}/tags", {
                 owner: "slsa-framework",
                 repository: "slsa-verifier",
@@ -120,7 +120,7 @@ function cleanup() {
 function run() {
     return __awaiter(this, void 0, void 0, function* () {
         // Get requested verifier version and validate
-        const actionRef = process.env.ACTION_REF || "";
+        const actionRef = process.env.GITHUB_ACTION_REF || "";
         let version;
         try {
             version = yield getVerifierVersion(actionRef);

actions/installer/dist/index.js.map

@@ -43,7 +43,7 @@ export async function getVerifierVersion(actionRef: string): Promise<string> {
   // If actionRef is a commit SHA, then find the associated version number.
   const shaRe = /^[a-f\d]{40}$/;
   if (shaRe.test(actionRef)) {
-    const octokit = github.getOctokit(process.env.TOKEN || "");
+    const octokit = github.getOctokit(core.getInput("github-token"));
     const { data: tags } = await octokit.request(
       "GET /repos/{owner}/{repository}/tags",
       {
@@ -88,7 +88,7 @@ async function cleanup(): Promise<void> {
 
 async function run(): Promise<void> {
   // Get requested verifier version and validate
-  const actionRef = process.env.ACTION_REF || "";
+  const actionRef = process.env.GITHUB_ACTION_REF || "";
   let version: string;
   try {
     version = await getVerifierVersion(actionRef);