initial mvp version

src/main.ts

@@ -0,0 +1,92 @@
+import * as core from '@actions/core'
+import * as github from '@actions/github'
+import * as fsHelper from './fs-helper'
+import * as ociContainer from './oci-container'
+import * as ghcr from './ghcr-client'
+import semver from 'semver'
+import { url } from 'inspector'
+
+/**
+ * The main function for the action.
+ * @returns {Promise<void>} Resolves when the action is complete.
+ */
+export async function run(): Promise<void> {
+  let tmpDir: string = ''
+
+  try {
+    // Parse and validate Actions execution context, including the repository name, release name and event type
+    const repository: string = process.env.GITHUB_REPOSITORY || ''
+    if (repository === '') {
+      core.setFailed(`Could not find Repository.`)
+      return
+    }
+    if (github.context.eventName !== 'release') {
+      core.setFailed('Please ensure you have the workflow trigger as release.')
+      return
+    }
+    const releaseId: string = github.context.payload.release.id
+    const releaseTag: string = github.context.payload.release.tag_name
+
+    // Strip any leading 'v' from the tag in case the release format is e.g. 'v1.0.0' as recommended by GitHub docs
+    // https://docs.github.com/en/actions/creating-actions/releasing-and-maintaining-actions
+    let targetVersion = semver.parse(releaseTag.replace(/^v/, ''))
+    if (!targetVersion) {
+      core.setFailed(
+        `${releaseTag} is not a valid semantic version, and so cannot be uploaded as an Immutable Action.`
+      )
+      return
+    }
+
+    // Gather & validate user inputs
+    const token: string = core.getInput('token')
+    const path: string = core.getInput('path')
+    const registryURL: URL = new URL(core.getInput('registry')) // TODO: Should this be dynamic? Maybe an API endpoint to grab the registry for GHES/proxima purposes.
+
+    if (!fsHelper.isDirectory(path)) {
+      core.setFailed(
+        `The path ${path} is not a directory. Please provide a path to a valid directory.`
+      )
+      return
+    }
+
+    // Create a temporary directory to store the archives
+    tmpDir = fsHelper.createTempDir()
+
+    const archives = await fsHelper.createArchives(path)
+
+    const manifest = ociContainer.createActionPackageManifest(
+      archives.tarFile,
+      archives.zipFile,
+      repository,
+      targetVersion.raw,
+      new Date()
+    )
+
+    let packageURL = await ghcr.publishOCIArtifact(
+      token,
+      registryURL,
+      repository,
+      releaseId.toString(),
+      targetVersion.raw,
+      archives.zipFile,
+      archives.tarFile,
+      manifest,
+      true
+    )
+
+    core.setOutput('package-url', packageURL.toString())
+
+    // TODO: We might need to do some attestation stuff here, but unsure how to integrate it yet.
+    // We might need to return the manifest JSON from the Action and link it to another action,
+    // or we might be able to make an API call here. It's unclear at this point.
+    core.setOutput('package-manifest', JSON.stringify(manifest))
+  } catch (error) {
+    // Fail the workflow run if an error occurs
+    if (error instanceof Error) core.setFailed(error.message)
+  } finally {
+    // Clean up the temporary directory if it exists
+    if (tmpDir !== '') {
+      fsHelper.removeDir(tmpDir)
+    }
+  }
+}