Convert from spdx parser to yaml - boilerplate

index.ts

@@ -0,0 +1,99 @@
+const core = require('@actions/core');
+const github = require('@actions/github');
+const fs = require('fs');
+const glob = require('glob');
+const yaml = require('yaml');
+
+import {
+  PackageCache,
+  BuildTarget,
+  Package,
+  Snapshot,
+  Manifest,
+  submitSnapshot
+} from '@github/dependency-submission-toolkit'
+
+async function run() {
+  let manifests = getManifestsFromEnvironmentFiles(searchFiles());
+  
+  let snapshot = new Snapshot({
+      name: "conda-dependency-submission-action",
+      version: "0.0.1",
+      url: "https://github.com/jhutchings1/conda-dependency-submission-action",
+  }, 
+  github.context,
+  {
+    correlator:`${github.context.job}`,
+    id: github.context.runId.toString()
+  });
+
+  manifests?.forEach(manifest => {
+    snapshot.addManifest(manifest);
+  });
+
+  submitSnapshot(snapshot);
+}
+
+function getManifestFromEnvironmentFile(document, fileName) {
+  core.debug(`getManifestFromEnvironmentFile processing ${fileName}`);
+
+  let manifest = new Manifest("Environment", fileName);
+
+
+/** 
+  let manifest = new Manifest(document.name, fileName);
+
+  core.debug(`Processing ${document.packages?.length} packages`);
+
+  document.packages?.forEach(pkg => {
+    let packageName = pkg.name;
+    let packageVersion = pkg.packageVersion;
+    let referenceLocator = pkg.externalRefs?.find(ref => ref.referenceCategory === "PACKAGE-MANAGER" && ref.referenceType === "purl")?.referenceLocator;
+    let genericPurl = `pkg:generic/${packageName}@${packageVersion}`;
+    // SPDX 2.3 defines a purl field 
+    let purl;
+    if (pkg.purl != undefined) {
+      purl = pkg.purl;
+    } else if (referenceLocator != undefined) {
+      purl = referenceLocator;
+    } else {
+      purl = genericPurl;
+    }  
+
+    // Working around weird encoding issues from an SBOM generator
+    // Find the last instance of %40 and replace it with @
+    purl = replaceVersionEscape(purl);  
+
+    let relationships = document.relationships?.find(rel => rel.relatedSpdxElement == pkg.SPDXID && rel.relationshipType == "DEPENDS_ON" && rel.spdxElementId != "SPDXRef-RootPackage");
+    if (relationships != null && relationships.length > 0) {
+      manifest.addIndirectDependency(new Package(purl));
+    } else {
+      manifest.addDirectDependency(new Package(purl));
+    }
+  });
+  return manifest;
+  */
+}
+
+function getManifestsFromEnvironmentFiles(files) {
+  core.debug(`Processing ${files.length} files`);
+  let manifests = [];
+  files?.forEach(file => {
+    core.debug(`Processing ${file}`);
+    manifests.push(getManifestFromEnvironmentFile(yaml.parse(file)));
+  });
+  return manifests;
+}
+
+function searchFiles(filePath = false, filePattern = false) {
+  if (!filePath) {
+    let filePath = core.getInput('filePath');
+  }
+  if (!filePattern) {
+    let filePattern = core.getInput('filePattern');
+  } 
+
+  return glob.sync(`${filePath}/${filePattern}`, {});
+}
+
+run();