action.yml

name: 'pkgchk'
description: 'An Action for .Net package dependency checks & PRs.'
author: "tonycknight"
inputs:
  project-path:  # id of input
    description: 'The relative path to the solution or project'
    required: true  
  deprecated:  # id of input
    description: 'Include deprecated packages in scans'
    required: false
    default: false    
  vulnerable: # id of input
    description: 'Include vulneraeble packages in scans'
    required: false
    default: true
  transitives: # id of input
    description: 'Include transitive packages in scans'
    required: false
    default: true
  trace: # id of input
    description: 'Output trace'
    required: false
    default: false
  github-token: # id of input
    description: 'Github token'
    required: true
    default: ${{ github.token }}
  repo: # id of input
    description: 'The repository name, as owner/repo'
    required: false
    default: ${{ github.repository }}
  github-title: # id of input
    description: 'The report title'
    required: false
    default: 'Package vulnerabilities'
  prid: # id of input
    description: 'The pull request ID'
    required: false
    default: ${{ github.event.number }}
  commit-hash: # id of input
    description: 'The commit hash'
    required: false
    default: ${{ github.sha }}
  fail-on-critical: # id of input
    description: 'fail on Critical severity vulnerabilities and packages deprecated for Critical Bugs reasons'
    required: true
    default: true
  fail-on-high: # id of input
    description: 'fail on High severity vulnerabilities'
    required: true
    default: true
  fail-on-moderate: # id of input
    description: 'fail on Moderate severity vulnerabilities'
    required: true
    default: false
  fail-on-legacy: # id of input
    description: 'fail on packages deprecated for Legacy reasons'
    required: true
    default: false
  pass-img: # id of input
    description: 'URI of an image for successful scans'
    required: false
    default: ''
  fail-img: # id of input
    description: 'URI of an image for failed scans'
    required: false
    default: ''
runs:  
      using: 'docker'
      image: 'docker://ghcr.io/tonycknight/pkgchk-cli:v0.2.388'
      args: 
      - /github/workspace/${{ inputs.project-path }}
      - '--deprecated'
      - ${{ inputs.deprecated }}
      - '--vulnerable'
      - ${{ inputs.vulnerable }}
      - '--transitive'
      - ${{ inputs.transitives }}
      - '--trace'
      - ${{ inputs.trace }}
      - '--github-token'
      - ${{ inputs.github-token }}
      - '--github-repo'
      - ${{ inputs.repo }}
      - '--github-pr'
      - ${{ inputs.prid }}
      - '--github-commit'
      - ${{ inputs.commit-hash }}
      - '--github-title'
      - ${{ inputs.github-title }}
      - '--pass-img'
      - ${{ inputs.pass-img }}
      - '--fail-img'
      - ${{ inputs.fail-img }}
      # https://7tonshark.com/posts/github-actions-ternary-operator/
      # https://pablissimo.com/1137/github-actions-ternary-operators-and-default-values      
      - '-s'
      - ${{ inputs.fail-on-critical == 'true' && 'Critical' || ' ' }}
      - '-s'
      - ${{ inputs.fail-on-high == 'true' && 'High' || ' ' }}
      - '-s'
      - ${{ inputs.fail-on-moderate == 'true' && 'Moderate' || ' ' }}
      - '-s'
      - ${{ inputs.fail-on-critical == 'true' && 'Critical Bugs' || ' ' }}
      - '-s'
      - ${{ inputs.fail-on-legacy == 'true' && 'Legacy' || ' ' }}
branding:
  icon: 'shield'
  color: 'green'