dependency-review-action/src/config.ts

import * as fs from 'fs'
import path from 'path'
import YAML from 'yaml'
import * as core from '@actions/core'
import * as z from 'zod'
import {ConfigurationOptions, SEVERITIES} from './schemas'

function getOptionalInput(name: string): string | undefined {
  const value = core.getInput(name)
  return value.length > 0 ? value : undefined
}

export function readConfig(): ConfigurationOptions {
  const externalConfig = getOptionalInput('config-file')
  if (externalConfig !== undefined) {
    const config = readConfigFile(externalConfig)
    const inlineConfig = readInlineConfig()
    return Object.assign({}, inlineConfig, config)
  } else {
    return readInlineConfig()
  }
}

export function readInlineConfig(): ConfigurationOptions {
  const fail_on_severity = z
    .enum(SEVERITIES)
    .default('low')
    .parse(getOptionalInput('fail-on-severity'))
  const allow_licenses = getOptionalInput('allow-licenses')
  const deny_licenses = getOptionalInput('deny-licenses')

  if (allow_licenses !== undefined && deny_licenses !== undefined) {
    throw new Error("Can't specify both allow_licenses and deny_licenses")
  }

  const base_ref = getOptionalInput('base-ref')
  const head_ref = getOptionalInput('head-ref')

  return {
    fail_on_severity,
    allow_licenses: allow_licenses?.split(',').map(x => x.trim()),
    deny_licenses: deny_licenses?.split(',').map(x => x.trim()),
    base_ref,
    head_ref
  }
}

export function readConfigFile(filePath: string): ConfigurationOptions {
  let data

  try {
    data = fs.readFileSync(path.resolve(filePath), 'utf-8')
  } catch (error: unknown) {
    throw error
  }
  const values = YAML.parse(data)

  // get rid of the ugly dashes from the actions conventions
  for (const key of Object.keys(values)) {
    if (key.includes('-')) {
      values[key.replace(/-/g, '_')] = values[key]
      delete values[key]
    }
  }
  return values
}