main.go

package main

import (
	"os"

	"github.com/Templum/govulncheck-action/pkg/action"
	"github.com/Templum/govulncheck-action/pkg/github"
	"github.com/Templum/govulncheck-action/pkg/sarif"
	"github.com/Templum/govulncheck-action/pkg/vulncheck"
	"github.com/rs/zerolog"
)

func main() {
	zerolog.SetGlobalLevel(zerolog.InfoLevel)
	logger := zerolog.New(zerolog.ConsoleWriter{Out: os.Stdout, TimeFormat: zerolog.TimeFormatUnix}).
		With().
		Timestamp().
		Logger() // Main Logger

	workDir, _ := os.Getwd()
	inLocalMode := os.Getenv("LOCAL") == "true"

	github := github.NewSarifUploader(logger)
	reporter := sarif.NewSarifReporter(logger, workDir)
	scanner := vulncheck.NewScanner(logger, workDir, inLocalMode)

	if os.Getenv("DEBUG") == "true" {
		zerolog.SetGlobalLevel(zerolog.DebugLevel)
		logger.Debug().Msg("Enabled Debug Level logs")
	}

	info := action.ReadRuntimeInfoFromEnv()

	logger.Info().
		Str("Go-Version", info.Version).
		Str("Go-Os", info.Os).
		Str("Go-Arch", info.Arch).
		Str("GOPRIVATE", os.Getenv("GOPRIVATE")).
		Msg("GoEnvironment Details:")

	logger.Debug().
		Str("Package", os.Getenv("PACKAGE")).
		Str("Skip Upload", os.Getenv("SKIP_UPLOAD")).
		Str("Fail on Vulnerabilities", os.Getenv("STRICT")).
		Msg("Action Inputs:")

	report, err := scanner.Scan()
	if err != nil {
		logger.Error().Err(err).Msg("Scanning yielded error")
		os.Exit(2)
	}

	err = reporter.Convert(report)
	if err != nil {
		logger.Error().Err(err).Msg("Conversion of Scan yielded error")
		os.Exit(2)
	}

	if os.Getenv("SKIP_UPLOAD") == "true" {
		logger.Info().Msg("Action is configured to skip upload instead will write to disk")

		fileName := "govulncheck-report.sarif"
		reportFile, err := os.Create(fileName)

		if err != nil {
			logger.Error().Err(err).Msg("Failed to create report file")
			os.Exit(2)
		}

		defer reportFile.Close()

		err = reporter.Write(reportFile)
		if err != nil {
			logger.Error().Err(err).Msg("Writing report to file yielded error")
			os.Exit(2)
		}

		logger.Info().Msgf("Successfully wrote sarif report to file %s", fileName)
	} else {
		err := github.UploadReport(reporter)
		if err != nil {
			logger.Error().Err(err).Msg("Upload of Sarif Report GitHub yielded error")
			os.Exit(2)
		}

		logger.Info().Msg("Successfully uploaded Sarif Report to Github, it will be available after processing")
	}

	if os.Getenv("STRICT") == "true" {
		logger.Debug().Msg("Action is running in strict mode")

		if len(report.Findings) > 0 {
			logger.Info().Msg("Encountered at least one vulnerability while running in strict mode, will mark outcome as failed")
			os.Exit(2)
		}
	}
}