"use strict"; var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) { if (k2 === undefined) k2 = k; var desc = Object.getOwnPropertyDescriptor(m, k); if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) { desc = { enumerable: true, get: function() { return m[k]; } }; } Object.defineProperty(o, k2, desc); }) : (function(o, m, k, k2) { if (k2 === undefined) k2 = k; o[k2] = m[k]; })); var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) { Object.defineProperty(o, "default", { enumerable: true, value: v }); }) : function(o, v) { o["default"] = v; }); var __importStar = (this && this.__importStar) || function (mod) { if (mod && mod.__esModule) return mod; var result = {}; if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k); __setModuleDefault(result, mod); return result; }; var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) { function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); } return new (P || (P = Promise))(function (resolve, reject) { function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } } function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } } function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); } step((generator = generator.apply(thisArg, _arguments || [])).next()); }); }; Object.defineProperty(exports, "__esModule", { value: true }); exports.run = void 0; const fs = __importStar(require("fs")); const path = __importStar(require("path")); const process = __importStar(require("process")); const core = __importStar(require("@actions/core")); const exec = __importStar(require("@actions/exec")); const common = __importStar(require("./msdo-common")); const installer = __importStar(require("./msdo-installer")); const AdmZip = require("adm-zip"); const cliVersionDefault = 'Latest'; function setupEnvironment() { return __awaiter(this, void 0, void 0, function* () { console.log('------------------------------------------------------------------------------'); if (!process.env.MSDO_FILEPATH) { let cliVersion = resolveCliVersion(); yield installer.install(cliVersion); } process.env.GDN_SETTINGS_FOLDERS = `Install=${process.env.MSDO_PACKAGES_DIRECTORY}`; console.log('------------------------------------------------------------------------------'); }); } function resolveCliVersion() { let cliVersion = cliVersionDefault; if (process.env.MSDO_VERSION) { cliVersion = process.env.MSDO_VERSION; } if (cliVersion.includes('*')) { cliVersion = 'Latest'; } return cliVersion; } function getCliFilePath() { let cliFilePath = process.env.MSDO_FILEPATH; core.debug(`cliFilePath = ${cliFilePath}`); return cliFilePath; } function init() { return __awaiter(this, void 0, void 0, function* () { try { let cliFilePath = getCliFilePath(); yield exec.exec(cliFilePath, ['init', '--force']); } catch (error) { core.debug(error); } }); } function run(inputArgs, telemetryEnvironment = 'github') { return __awaiter(this, void 0, void 0, function* () { let cliFilePath = null; let args = []; let debugDrop = common.parseBool(process.env.GDN_DEBUG_DROP); const gdnTaskLibFolder = path.resolve(__dirname); core.debug(`gdnTaskLibFolder = ${gdnTaskLibFolder}`); const nodeModulesFolder = path.dirname(path.dirname(gdnTaskLibFolder)); core.debug(`nodeModulesFolder = ${nodeModulesFolder}`); const taskFolder = path.dirname(nodeModulesFolder); core.debug(`taskFolder = ${taskFolder}`); const debugFolder = path.join(taskFolder, 'debug'); core.debug(`debugFolder = ${debugFolder}`); try { yield setupEnvironment(); yield init(); cliFilePath = process.env.MSDO_FILEPATH; core.debug(`cliFilePath = ${cliFilePath}`); if (inputArgs != null && inputArgs.length != 0) { for (let i = 0; i < inputArgs.length; i++) { args.push(inputArgs[i]); } } if (core.isDebug()) { args.push('--logger-level'); args.push('trace'); } let isUploadExisting = inputArgs[0] == "upload"; if (!isUploadExisting) { args.push('--not-break-on-detections'); let sarifFile = path.join(process.env.GITHUB_WORKSPACE, '.gdn', 'msdo.sarif'); core.debug(`sarifFile = ${sarifFile}`); core.exportVariable('MSDO_SARIF_FILE', sarifFile); core.setOutput('sarifFile', sarifFile); if (common.isVersionGreaterThanOrEqualTo(process.env.MSDO_INSTALLEDVERSION, '0.183.0')) { args.push('--export-file'); } else { args.push('--export-breaking-results-to-file'); } args.push(sarifFile); } args.push('--telemetry-environment'); args.push(telemetryEnvironment); core.debug(`GdnDebugDrop = ${debugDrop}`); if (debugDrop) { args.push('--debug-drop'); args.push('--debug-drop-path'); args.push(debugFolder); const debugFolderEnvVarName = `GDN_DEBUGDROPPATH`; core.debug(`Debug Drop enabled. ${debugFolderEnvVarName}: ${debugFolder}`); process.env[debugFolderEnvVarName] = debugFolder; } } catch (error) { core.error('Exception occurred while initializing MSDO:'); core.error(error); core.setFailed(error); return; } try { core.debug('Running Microsoft Security DevOps...'); cleanupDirectory(debugFolder); yield exec.exec(cliFilePath, args); let debugStagingDir = ''; core.debug(`GdnDebugDrop = ${debugDrop}`); if (debugDrop) { if (fs.existsSync(debugFolder)) { core.debug("Creating debug drop archive..."); let zippedOutput = getZippedFolder(debugFolder); const instanceDirectory = process.env.GITHUB_WORKSPACE; debugStagingDir = path.join(instanceDirectory, '.gdn', 'debugdrop'); if (!fs.existsSync(debugStagingDir)) { core.debug(`Creating missing folder: ${debugStagingDir}`); fs.mkdirSync(debugStagingDir); } let debugDropArtifact = path.join(debugStagingDir, `MSDO_debug.zip`); let dupeCount = 1; while (fs.existsSync(debugDropArtifact)) { core.debug(`Debug Drop with the name ${debugDropArtifact} already exists, updating name to avoid collision...`); dupeCount += 1; debugDropArtifact = path.join(debugStagingDir, `MSDO_debug_${dupeCount}.zip`); } fs.copyFileSync(zippedOutput, debugDropArtifact); core.debug(`Finished creating: ${debugDropArtifact}`); core.debug(`DebugDrop = ${debugStagingDir}`); core.exportVariable('MSDO_DEBUG_DROP_FOLDER', debugStagingDir); core.setOutput('debugDrop', debugStagingDir); core.debug(`Cleaning up: ${debugFolder}`); cleanupDirectory(debugFolder); core.debug(`Successfully cleaned up debug dump.`); } } } catch (error) { core.setFailed(error); return; } }); } exports.run = run; function getZippedFolder(dir) { core.debug(`Zipping up folder: ${dir}`); let allPaths = getFilePathsRecursively(dir); const zip = new AdmZip(); for (let filePath of allPaths) { core.debug(`Adding file to archive: ${filePath}`); zip.addLocalFile(filePath); } let destPath = `${dir}.zip`; core.debug(`Writing to file: ${destPath}`); zip.writeZip(destPath); if (fs.existsSync(destPath)) { core.debug(`Successfully wrote file: ${destPath}`); } else { core.debug(`Something went wrong! File does not exist: ${destPath}`); } return destPath; } function getFilePathsRecursively(dir) { core.debug(`Searching for files under dir: ${dir}`); var files = []; let fileList = fs.readdirSync(dir); var remaining = fileList.length; if (!remaining) return files; for (let file of fileList) { file = path.resolve(dir, file); let stat = fs.statSync(file); if (stat && stat.isDirectory()) { let f = getFilePathsRecursively(file); files = files.concat(f); } else { files.push(file); } if (!--remaining) { return files; } } } function cleanupDirectory(dir) { if (!fs.existsSync(dir)) return; let items = fs.readdirSync(dir); for (let item of items) { item = path.resolve(dir, item); let stat = fs.statSync(item); if (stat && stat.isDirectory()) { cleanupDirectory(item); } else { fs.unlinkSync(item); } } fs.rmdirSync(dir); }