Added report-artifact-log flag. (#15)

If set to false, logs will not be uploaded as job artifact.

Author: elad-pticha

.github/workflows/verify-pr.yaml

@@ -49,3 +49,25 @@ jobs:
           client-id: ${{ secrets.CIMON_CLIENT_ID }}
           secret: ${{ secrets.CIMON_SECRET }}
           allowed-hosts: this,would,^$#yield,error
+
+  verify-no-artifact:
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c
+
+      - name: Run Cimon
+        uses: ./
+        with:
+          client-id: ${{ secrets.CIMON_CLIENT_ID }}
+          secret: ${{ secrets.CIMON_SECRET }}
+          prevent: true
+          report-artifact-log: false
+          allowed-hosts: >
+            cycode.com
+
+      - name: Test
+        run: |
+          curl -I https://cycode.com
+          curl -I https://github.com
+    

README.md

@@ -33,6 +33,7 @@ The action supports the following parameters:
 | `github-token`           | `${{ github.token }}`               | GitHub token (used to overcome GitHub rate limiting)                            |
 | `report-job-summary`     | `true`                              | Report results through job summary output                                       |
 | `report-process-tree`    | `false`                             | Enable to report the process tree                                               |
+| `report-artifact-log`    | `true`                              | Report logs through job artifact                                                |
 | `slack-webhook-endpoint` |                                     | Slack webhook endpoint to report security events                                |
 | `apply-fs-events`        | `false`                             | Enable processing filesystem events and display them in the process tree report |
 | `docker-image`           | `docker.io/cycodelabs/cimon:v0.4.0` | Docker image reference                                                          |

action.yaml

@@ -29,6 +29,10 @@ inputs:
     description: Enable to report the process tree
     required: false
     default: "false"
+  report-artifact-log:
+    description: Report logs through job artifact
+    required: false
+    default: "true"
   slack-webhook-endpoint:
     description: Slack webhook endpoint to report security events
     required: false

dist/main/index.js

@@ -4138,6 +4138,7 @@ function getActionConfig() {
 
     const reportJobSummary = _actions_core__WEBPACK_IMPORTED_MODULE_0__.getBooleanInput('report-job-summary');
     const reportProcessTree = _actions_core__WEBPACK_IMPORTED_MODULE_0__.getBooleanInput('report-process-tree');
+    const reportArtifactLog = _actions_core__WEBPACK_IMPORTED_MODULE_0__.getBooleanInput('report-artifact-log');
     const slackWebhookEndpoint = _actions_core__WEBPACK_IMPORTED_MODULE_0__.getInput('slack-webhook-endpoint');
     const featureGates = _actions_core__WEBPACK_IMPORTED_MODULE_0__.getMultilineInput('feature-gates');
 
@@ -4164,6 +4165,7 @@ function getActionConfig() {
         report: {
             jobSummary: reportJobSummary,
             processTree: reportProcessTree,
+            artifactLog: reportArtifactLog,
             slackWebhookEndpoint: slackWebhookEndpoint,
         },
     };
@@ -4249,6 +4251,7 @@ async function run(config) {
         args.push('--env', `CIMON_FEATURE_GATES=${config.cimon.featureGates}`);
     }
 
+    
     args.push(config.docker.image);
 
     const exitCode = await _actions_exec__WEBPACK_IMPORTED_MODULE_1__.exec('docker', args, {

dist/post/index.js

@@ -10967,7 +10967,7 @@ __nccwpck_require__.a(__webpack_module__, async (__webpack_handle_async_dependen
 function getActionConfig() {
     return {
         job: process.env.GITHUB_JOB,
-        createArtifact: true,
+        createArtifact: _actions_core__WEBPACK_IMPORTED_MODULE_0__.getBooleanInput('report-artifact-log'),
     };
 }
 

src/main/index.js

@@ -22,6 +22,7 @@ function getActionConfig() {
 
     const reportJobSummary = core.getBooleanInput('report-job-summary');
     const reportProcessTree = core.getBooleanInput('report-process-tree');
+    const reportArtifactLog = core.getBooleanInput('report-artifact-log');
     const slackWebhookEndpoint = core.getInput('slack-webhook-endpoint');
     const featureGates = core.getMultilineInput('feature-gates');
 
@@ -48,6 +49,7 @@ function getActionConfig() {
         report: {
             jobSummary: reportJobSummary,
             processTree: reportProcessTree,
+            artifactLog: reportArtifactLog,
             slackWebhookEndpoint: slackWebhookEndpoint,
         },
     };
@@ -133,6 +135,7 @@ async function run(config) {
         args.push('--env', `CIMON_FEATURE_GATES=${config.cimon.featureGates}`);
     }
 
+    
     args.push(config.docker.image);
 
     const exitCode = await exec.exec('docker', args, {

src/post/index.js

@@ -7,7 +7,7 @@ import poll from "../poll/poll.js";
 function getActionConfig() {
     return {
         job: process.env.GITHUB_JOB,
-        createArtifact: true,
+        createArtifact: core.getBooleanInput('report-artifact-log'),
     };
 }