mirror of
https://git.mirrors.martin98.com/https://github.com/actions/toolkit
synced 2025-11-18 17:41:06 +08:00
e60694077d
Instead of having the urls hardcoded, read them from the environment. I opted to read from the environment variable instead of the github context because it would be easier to test.
57 lines
1.5 KiB
TypeScript
57 lines
1.5 KiB
TypeScript
import * as github from '@actions/github'
|
|
|
|
const PUBLIC_GOOD_ID = 'public-good'
|
|
const GITHUB_ID = 'github'
|
|
|
|
const FULCIO_PUBLIC_GOOD_URL = 'https://fulcio.sigstore.dev'
|
|
const REKOR_PUBLIC_GOOD_URL = 'https://rekor.sigstore.dev'
|
|
|
|
export type SigstoreInstance = typeof PUBLIC_GOOD_ID | typeof GITHUB_ID
|
|
|
|
export type Endpoints = {
|
|
fulcioURL: string
|
|
rekorURL?: string
|
|
tsaServerURL?: string
|
|
}
|
|
|
|
export const SIGSTORE_PUBLIC_GOOD: Endpoints = {
|
|
fulcioURL: FULCIO_PUBLIC_GOOD_URL,
|
|
rekorURL: REKOR_PUBLIC_GOOD_URL
|
|
}
|
|
|
|
export const signingEndpoints = (sigstore?: SigstoreInstance): Endpoints => {
|
|
let instance: SigstoreInstance
|
|
|
|
// An explicitly set instance type takes precedence, but if not set, use the
|
|
// repository's visibility to determine the instance type.
|
|
if (sigstore && [PUBLIC_GOOD_ID, GITHUB_ID].includes(sigstore)) {
|
|
instance = sigstore
|
|
} else {
|
|
instance =
|
|
github.context.payload.repository?.visibility === 'public'
|
|
? PUBLIC_GOOD_ID
|
|
: GITHUB_ID
|
|
}
|
|
|
|
switch (instance) {
|
|
case PUBLIC_GOOD_ID:
|
|
return SIGSTORE_PUBLIC_GOOD
|
|
case GITHUB_ID:
|
|
return buildGitHubEndpoints()
|
|
}
|
|
}
|
|
|
|
function buildGitHubEndpoints(): Endpoints {
|
|
const serverURL = process.env.GITHUB_SERVER_URL ?? `https://github.com`
|
|
let url = serverURL.replace('https://', '')
|
|
|
|
if (url === 'github.com') {
|
|
url = 'githubapp.com'
|
|
}
|
|
const endpoints: Endpoints = {
|
|
fulcioURL: `https://fulcio.${url}`,
|
|
tsaServerURL: `https://timestamp.${url}`
|
|
}
|
|
return endpoints
|
|
}
|