const core = require('@actions/core'); const github = require('@actions/github'); const fs = require('fs'); const glob = require('glob'); const yaml = require('yaml'); import { PackageCache, BuildTarget, Package, Snapshot, Manifest, submitSnapshot } from '@github/dependency-submission-toolkit' async function run() { let manifests = getManifestsFromEnvironmentFiles(searchFiles()); let snapshot = new Snapshot({ name: "conda-dependency-submission-action", version: "0.0.1", url: "https://github.com/jhutchings1/conda-dependency-submission-action", }, github.context, { correlator:`${github.context.job}`, id: github.context.runId.toString() }); manifests?.forEach(manifest => { snapshot.addManifest(manifest); }); submitSnapshot(snapshot); } function getManifestFromEnvironmentFile(document, fileName) { core.debug(`getManifestFromEnvironmentFile processing ${fileName}`); let manifest = new Manifest("Environment", fileName); /** let manifest = new Manifest(document.name, fileName); core.debug(`Processing ${document.packages?.length} packages`); document.packages?.forEach(pkg => { let packageName = pkg.name; let packageVersion = pkg.packageVersion; let referenceLocator = pkg.externalRefs?.find(ref => ref.referenceCategory === "PACKAGE-MANAGER" && ref.referenceType === "purl")?.referenceLocator; let genericPurl = `pkg:generic/${packageName}@${packageVersion}`; // SPDX 2.3 defines a purl field let purl; if (pkg.purl != undefined) { purl = pkg.purl; } else if (referenceLocator != undefined) { purl = referenceLocator; } else { purl = genericPurl; } // Working around weird encoding issues from an SBOM generator // Find the last instance of %40 and replace it with @ purl = replaceVersionEscape(purl); let relationships = document.relationships?.find(rel => rel.relatedSpdxElement == pkg.SPDXID && rel.relationshipType == "DEPENDS_ON" && rel.spdxElementId != "SPDXRef-RootPackage"); if (relationships != null && relationships.length > 0) { manifest.addIndirectDependency(new Package(purl)); } else { manifest.addDirectDependency(new Package(purl)); } }); return manifest; */ } function getManifestsFromEnvironmentFiles(files) { core.debug(`Processing ${files.length} files`); let manifests = []; files?.forEach(file => { core.debug(`Processing ${file}`); manifests.push(getManifestFromEnvironmentFile(yaml.parse(file))); }); return manifests; } function searchFiles(filePath = false, filePattern = false) { if (!filePath) { let filePath = core.getInput('filePath'); } if (!filePattern) { let filePattern = core.getInput('filePattern'); } return glob.sync(`${filePath}/${filePattern}`, {}); } run();