add support for scan triggers (#12)

* add support for scan triggers

* wrong logic

* update default env vars when trigger

Author: JonathanSerafini

action.yaml

@@ -32,7 +32,7 @@ inputs:
     default: ""
   registry_module:
     description: "Module within the scanner registry to execute"
-    required: true
+    default: ""
   scanner_id:
     description: "Optional identifier to uniquely identify the scanner"
     default: ""
@@ -51,6 +51,9 @@ inputs:
   scan_main_timeout:
     description: "Maximum amount of time a main scan should complete in"
     default: ""
+  trigger_id:
+    description: "Boost API workflow trigger id"
+    default: ""
 runs:
   using: "composite"
   steps:
@@ -73,3 +76,4 @@ runs:
         BOOST_SCAN_PATH: ${{ inputs.scan_path }}
         BOOST_SCANNER_ID: ${{ inputs.scanner_id }}
         BOOST_SCANNER_REGISTRY_MODULE: ${{ inputs.registry_module }}
+        BOOST_TRIGGER_ID: ${{ inputs.trigger_id }}

lib/scan.sh

@@ -20,17 +20,19 @@ init.config ()
 {
   log.info "initializing configuration"
 
-  export BOOST_DIFF_SCAN_TIMEOUT=${BOOST_DIFF_SCAN_TIMEOUT:-${BOOST_SCAN_TIMEOUT:-}}
-
   export BOOST_TMP_DIR=${BOOST_TMP_DIR:-${WORKSPACE_TMP:-${TMPDIR:-/tmp}}}
   export BOOST_EXE=${BOOST_EXE:-${BOOST_TMP_DIR}/boost-cli/latest}
 
   export BOOST_CLI_URL=${BOOST_CLI_URL:-https://assets.build.boostsecurity.io}
          BOOST_CLI_URL=${BOOST_CLI_URL%*/}
   export BOOST_DOWNLOAD_URL=${BOOST_DOWNLOAD_URL:-${BOOST_CLI_URL}/boost-cli/get-boost-cli}
 
-  export BOOST_GIT_MAIN_BRANCH
-         BOOST_GIT_MAIN_BRANCH=${BOOST_GIT_MAIN_BRANCH:-$(git.ls_remote)}
+  if [ -z "${BOOST_TRIGGER_ID:-}" ]; then
+    export BOOST_DIFF_SCAN_TIMEOUT=${BOOST_DIFF_SCAN_TIMEOUT:-${BOOST_SCAN_TIMEOUT:-}}
+
+    export BOOST_GIT_MAIN_BRANCH
+           BOOST_GIT_MAIN_BRANCH=${BOOST_GIT_MAIN_BRANCH:-$(git.ls_remote)}
+  fi
 
   init.ci.config
 }
@@ -51,8 +53,13 @@ main.scan ()
   init.config
   init.cli
 
-  # shellcheck disable=SC2086
-  exec ${BOOST_EXE} scan repo ${BOOST_CLI_ARGUMENTS:-}
+  if [ -n "${BOOST_TRIGGER_ID:-}" ]; then
+    # shellcheck disable=SC2086
+    exec ${BOOST_EXE} scan trigger ${BOOST_CLI_ARGUMENTS:-}
+  else
+    # shellcheck disable=SC2086
+    exec ${BOOST_EXE} scan repo ${BOOST_CLI_ARGUMENTS:-}
+  fi
 }
 
 if [ "${0}" = "${BASH_SOURCE[0]}" ]; then