Merge pull request #5 from Contrast-Security-OSS/PRODSEC-462

Prodsec 462 - fix policy url

Author: DavidMContrast

CHANGELOG.md

@@ -4,7 +4,7 @@ All notable changes to this project will be documented in this file. Dates are d
 
 Generated by [`auto-changelog`](https://github.com/CookPete/auto-changelog).
 
-#### [v1.0.1](https://github.com/Contrast-Security-OSS/actionbot/commit/fa95c969a50f6c331ec8ef19580fb9b8521851ca...https://github.com/Contrast-Security-OSS/actionbot/pull/4/commits/5f6c36987c9e39b866fd3b7aeed4203aeedb6265)
+#### [v1.0.3](https://github.com/Contrast-Security-OSS/actionbot/compare/v1.0.0...v1.0.3)
 
 - Bump eslint-plugin-github from 5.1.8 to 6.0.0 [`#1`](https://github.com/Contrast-Security-OSS/actionbot/pull/1)
 - Migration build [`#3`](https://github.com/Contrast-Security-OSS/actionbot/pull/3)

lib/index.js

@@ -39024,11 +39024,16 @@ function run(context) {
                 });
             }
             else {
-                // Load up the github policy list
+                // Correctly extract the file path from the policyUrl
+                const filePath = policyUrl
+                    .replace("https://github.com/", "")
+                    .split("/")
+                    .slice(4) // Start after 'blob/main'
+                    .join("/");
                 const response = yield client.rest.repos.getContent({
                     owner: github.context.repo.owner,
                     repo: github.context.repo.repo,
-                    path: policyUrl.replace("https://github.com/", "").split("/").slice(2).join("/"),
+                    path: filePath, // Use the corrected file path
                 });
                 if (response.data && "content" in response.data) {
                     const content = Buffer.from(response.data.content, "base64").toString("utf-8");

package.json

@@ -1,6 +1,6 @@
 {
   "name": "actionbot",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "private": true,
   "description": "Github Action Policy Checker as a Github Action",
   "main": "lib/index.js",

src/main.ts

@@ -171,15 +171,17 @@ async function run(context: typeof github.context): Promise<void> {
           // Handle the error appropriately (e.g., throw an error, set a default policy)
         });
     } else {
-      // Load up the github policy list
+      // Correctly extract the file path from the policyUrl
+      const filePath = policyUrl
+        .replace("https://github.com/", "")
+        .split("/")
+        .slice(4) // Start after 'blob/main'
+        .join("/");
+
       const response = await client.rest.repos.getContent({
         owner: github.context.repo.owner,
         repo: github.context.repo.repo,
-        path: policyUrl
-          .replace("https://github.com/", "")
-          .split("/")
-          .slice(2)
-          .join("/"),
+        path: filePath, // Use the corrected file path
       });
 
       if (response.data && "content" in response.data) {