Update Github-Actions-Core, Semver, remove Snyk (#87 )

* Update Github-Actions-Core to mitigate semver CVE * Bump io/tool cache to the same version used in core * Remove Snyk
Result of tsccr-helper -log-level=info -pin-all-workflows . (#84 )
2026-04-02 01:22:33 +00:00 · 2023-11-15 09:41:06 -08:00 · 2023-09-13 17:02:32 +02:00 · 2023-08-17 10:06:37 -07:00 · 2023-03-15 10:41:30 +01:00 · 2023-03-07 15:10:01 -08:00
17 changed files with 361 additions and 306 deletions
--- a/.copywrite.hcl
+++ b/.copywrite.hcl
@@ -0,0 +1,7 @@
+schema_version = 1
+
+project {
+  header_ignore = [
+    "dist/index.js"
+  ]
+}
--- a/.github/workflows/actions-self-test.yml
+++ b/.github/workflows/actions-self-test.yml
@@ -0,0 +1,51 @@
+name: "GitHub Action: Self-Test"
+
+on:
+  push:
+
+env:
+  PRODUCT_VERSION: "1.8.6"
+
+jobs:
+  setup-packer:
+    name: Test `setup-packer`
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+
+      - name: Setup `packer` (using local GitHub Action)
+        uses: "./"
+        id: setup
+        with:
+          version: ${{ env.PRODUCT_VERSION }}
+
+      - name: Print `$PATH` for `packer`
+        run: which packer
+
+      - name: Print `packer` version
+        run: packer version
+
+      - name: Validate `packer` version is accurate
+        run: "packer version | grep --silent 'Packer v${{ env.PRODUCT_VERSION }}'"
+
+      - name: Run `packer fmt`
+        run: packer fmt -check "./test/hello-world.pkr.hcl"
+
+      - name: Setup `packer` with an invalid version (using local GitHub Action)
+        uses: "./"
+        id: invalid_version
+        with:
+          version: "invalid_version"
+        continue-on-error: true
+
+      - name: Validate invalid version failed
+        if: steps.invalid_version.outcome == 'success'
+        run: echo "Installing an invalid version expected to fail but did not" && exit 1
+
+      - name: Setup `packer` with `latest` version (using local GitHub Action)
+        uses: "./"
+        id: latest_version
+
+      - name: Print `packer` version
+        run: packer version
--- a/.github/workflows/snyk.yml
+++ b/.github/workflows/snyk.yml
@@ -1,35 +0,0 @@
---
-name: "Security Scan: Snyk Code"
-
-on:
-  push:
-
-jobs:
-  snyk:
-    runs-on: ubuntu-latest
-
-    strategy:
-      # see https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstrategyfail-fast
-      fail-fast: false
-
-    steps:
-      - name: Checkout Repository
-        uses: actions/checkout@v3
-        with:
-          fetch-depth: 1
-
-      # see https://github.com/snyk/actions/tree/master/node
-      - name: Lint Code with Snyk
-        uses: snyk/actions/node@master
-        env:
-          # see https://github.com/snyk/actions#getting-your-snyk-token
-          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
-        with:
-          # see https://github.com/snyk/actions/tree/master/node#uploading-snyk-scan-results-to-github-code-scanning
-          args: --policy-path=.snyk --sarif-file-output=snyk.sarif --org=${{ secrets.SNYK_ORG }}
-
-#      # see https://github.com/github/codeql-action/tree/main/upload-sarif
-#      - name: Upload Snyk IaC results to GitHub Code Scanning
-#        uses: github/codeql-action/upload-sarif@v2
-#        with:
-#          sarif_file: snyk.sarif
--- a/.github/workflows/superlinter.yml
+++ b/.github/workflows/superlinter.yml
@@ -10,13 +10,13 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
        with:
          # Full git history is needed to get a proper list of changed files within `super-linter`
          fetch-depth: 0

      - name: Lint Code with Super-Linter
-        uses: github/super-linter@v4
+        uses: github/super-linter/slim@45fc0d88288beee4701c62761281edfee85655d7 # v5.0.0
        env:
          VALIDATE_ALL_CODEBASE: true
          DEFAULT_BRANCH: "main"
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,70 +0,0 @@
-name: test
-
-on:
-  push:
-    branches:
-      - main
-
-
-jobs:
-  setup-packer:
-    runs-on: ubuntu-latest
-    name: Test setup-packer
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-
-      ## TODO: should use whatever current branch is, not hardcoded brnach
-      - name: Setup `packer` from renamed action
-        uses: hashicorp/setup-packer@main
-        id: setup
-        with:
-          version: "1.8.1"
-
-      - name: Print `$PATH`
-        run: which packer
-
-      - name: Print packer version
-        run: packer version
-
-      - name: Validate Packer version is latest (1.8.1)
-        run: if packer version | grep -q "Packer v1.8.1"; then echo "passed"; else exit 1; fi;
-
-      - name: Run `packer` init
-        run: packer init "${{ github.action_path }}./test/hello-world.pkr.hcl"
-
-      - name: Try to setup packer for an invalid verison
-        uses: hashicorp/setup-packer@main
-        id: ranch
-        with:
-          version: "ranch"
-        continue-on-error: true
-
-      - name: Validate invalid version failed
-        if: steps.ranch.outcome == 'success'
-        run: echo "Installing an invalid version expected to fail but did not" && exit 1
-
-      - name: Try to setup packer for a verison that has yet to be released
-        uses: hashicorp/setup-packer@main
-        id: packer3
-        with:
-          version: "3.0.0"
-        continue-on-error: true
-
-      - name: Validate invalid version failed
-        if: steps.packer3.outcome == 'success'
-        run: echo "Installing a non existant expected to fail but did not" && exit 1
-
-      - name: No version defaults to latest
-        uses: hashicorp/setup-packer@main
-        id: latest
-
-     ## TODO, don't hardcode version
-      - name: Validate Packer version is latest (currently hardcoded, need to refactor)
-        run: if packer version | grep -q "Packer v1.8.4"; then echo "passed"; else exit 1; fi;
-
-      - name: Print packer version
-        run: packer version
-
-      - name: Run `packer` init
-        run: packer init "${{ github.action_path }}./test/hello-world.pkr.hcl"
--- a/.github/workflows/typescript.yml
+++ b/.github/workflows/typescript.yml
@@ -18,12 +18,12 @@ jobs:

    steps:
      - name: Checkout Repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
        with:
          fetch-depth: 1

      - name: Set up Node.js
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1
        with:
          node-version: ${{ matrix.node-version }}
          cache: 'npm'
--- a/.release-it.json
+++ b/.release-it.json
@@ -1,34 +0,0 @@
-{
-  "git": {
-    "changelog": "git log --pretty=format:\"* %s (%h)\" ${from}...${to}",
-    "commit": true,
-    "commitArgs": ["-S"],
-    "commitMessage": "Release v${version}",
-    "requireBranch": false,
-    "requireCleanWorkingDir": true,
-    "requireCommits": true,
-    "requireUpstream": true,
-    "addUntrackedFiles": false,
-    "push": true,
-    "tag": true,
-    "tagAnnotation": "Release v${version}"
-  },
-
-  "github": {
-    "autoGenerate": true,
-    "draft": true,
-    "host": null,
-    "release": false,
-    "releaseName": "Release v${version}",
-    "releaseNotes": true,
-    "skipChecks": true,
-    "timeout": 0,
-    "web": true
-  },
-
-  "hooks": {},
-
-  "npm": {
-    "publish": false
-  }
-}
--- a/.snyk
+++ b/.snyk
@@ -1,19 +0,0 @@
-version: v1.25.0
-
-# see https://docs.snyk.io/snyk-cli/test-for-vulnerabilities/the-.snyk-file?q=
-ignore:
-  # see https://security.snyk.io/vuln/snyk:lic:npm:hashicorp:js-releases:MPL-2.0]
-  'snyk:lic:npm:hashicorp:js-releases:MPL-2.0':
-    - '@hashicorp/js-releases':
-        reason: acceptable license
-        expires: 2023-12-31T00:00:00.000Z
-        created: 2022-08-16T00:00:00.000Z
-
-  # see https://security.snyk.io/vuln/snyk:lic:npm:openpgp:LGPL-3.0
-  'snyk:lic:npm:openpgp:LGPL-3.0':
-    - '@hashicorp/js-releases > openpgp':
-        reason: acceptable license
-        expires: 2023-12-31T00:00:00.000Z
-        created: 2022-08-16T00:00:00.000Z
-
-patch: {}
--- a/README.md
+++ b/README.md
@@ -1,23 +1,30 @@
-# GitHub Action: setup-packer
+# GitHub Action: `setup-packer`

-The `hashicorp/setup-packer` Action sets up the `packer` CLI in your GitHub Actions workflow by adding the binary to `PATH`.
+The `hashicorp/setup-packer` Action sets up the [Packer](https://www.packer.io) CLI in your GitHub Actions workflow by adding the `packer` binary to `PATH`.
+
+[![GitHub Action: Self-Test](https://github.com/hashicorp/setup-packer/actions/workflows/actions-self-test.yml/badge.svg?branch=main)](https://github.com/hashicorp/setup-packer/actions/workflows/actions-self-test.yml)

 ## Table of Contents

- [GitHub Action: setup-packer](#github-action-setup-packer)
-  - [Table of Contents](#table-of-contents)
-  - [Requirements](#requirements)
-  - [Usage](#usage)
-  - [Author Information](#author-information)
-  - [License](#license)
+<!-- TOC -->
+* [GitHub Action: `setup-packer`](#github-action--setup-packer)
+  * [Table of Contents](#table-of-contents)
+  * [Requirements](#requirements)
+  * [Usage](#usage)
+  * [Inputs](#inputs)
+  * [Outputs](#outputs)
+  * [Integrating with HCP Packer](#Integrating-with-HCP-Packer)
+  * [Author Information](#author-information)
+  * [License](#license)
+<!-- TOC -->

 ## Requirements

 This GitHub Actions supports all commands that are available in the `packer` CLI.

-The [`build`](https://www.packer.io/docs/commands/build) command may require access to provider-specific credentials.
+The [`build`](https://developer.hashicorp.com/packer/docs/commands/build) command may require access to provider-specific credentials.

-Other [environment variables](https://www.packer.io/docs/commands#environment-variables) (such as `PACKER_LOG`) may be set as normal and will be picked up accordingly.
+Other [environment variables](https://developer.hashicorp.com/packer/docs/commands#environment-variables) (such as `PACKER_LOG`) may be set as normal and will be picked up accordingly.

 ## Usage

@@ -27,7 +34,10 @@ Other [environment variables](https://www.packer.io/docs/commands#environment-va
 name: packer

 on:
-  - push
+  push:
+
+env:
+  PRODUCT_VERSION: "1.8.6" # or: "latest"

 jobs:
  packer:
@@ -41,7 +51,7 @@ jobs:
        uses: hashicorp/setup-packer@main
        id: setup
        with:
-          version: "1.8.3" # or `latest`
+          version: ${{ env.PRODUCT_VERSION }}

      - name: Run `packer init`
        id: init
@@ -56,7 +66,7 @@ In the above example, the following definitions have been set.

 - The event trigger has been set to `push`. For a complete list, see [Events that trigger workflows](https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows).
 - The origin of this GitHub Action has been set as `hashicorp/setup-packer@main`. For newer versions, see the [Releases](https://github.com/hashicorp/setup-packer/releases).
- The version of `packer` to set up has been set as `1.8.3`. For a complete list, see [releases.hashicorp.com](https://releases.hashicorp.com/packer/).
+- The version of `packer` to set up has been set as `1.8.6`. For a complete list, see [releases.hashicorp.com](https://releases.hashicorp.com/packer/).
 - The Packer manifest to interact with has been set as `./image.pkr.hcl`

 These definitions may require updating to suit your deployment, such as specifying [self-hosted](https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#choosing-self-hosted-runners) runners.
@@ -67,7 +77,7 @@ Additionally, you may configure [outputs](https://docs.github.com/en/actions/usi

 This section contains a list of all inputs that may be set for this Action.

- `version` - (required) The version of `packer` to install. Defaults to `latest`.
+- `version` - The version of `packer` to install. Defaults to `latest` if unset.

 ## Outputs

@@ -75,6 +85,46 @@ This section contains a list of all outputs that can be consumed from this Actio

 - `version` -  The version of `packer` that was installed.

+## Integrating with HCP Packer
+To integrate with HCP Packer, add your HCP Client ID and HCP Client secret as environment variables to the Packer build call.
+
+We add an `HCP_PACKER_BUILD_FINGERPRINT` in this example that is based on the workflow run ID, that way it is always unique
+
+We recommend storing these in [GitHub Actions Secrets](https://docs.github.com/en/actions/security-guides/encrypted-secrets#creating-encrypted-secrets-for-a-repository) (as opposed to plain-text). See the [HCP Packer Getting Started tutorial](https://developer.hashicorp.com/packer/tutorials/hcp-get-started/hcp-push-image-metadata)
+
+```yaml
+name: hcp-packer
+
+on:
+  - push
+
+jobs:
+  hcp-packer:
+    runs-on: ubuntu-latest
+    name: Run Packer
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Setup `packer`
+        uses: hashicorp/setup-packer@main
+        id: setup
+        with:
+          version: "latest"
+      - name: Run `packer init`
+        id: init
+        run: "packer init ./image.pkr.hcl"
+      - name: Run `packer validate`
+        id: validate
+        run: "packer validate ./image.pkr.hcl"
+
+      - name: Build Artifact
+        run: packer build -color=false -on-error=abort ./image.pkr.hcl
+        env:
+          HCP_CLIENT_ID: ${{ secrets.HCP_CLIENT_ID }}
+          HCP_CLIENT_SECRET: ${{ secrets.HCP_CLIENT_SECRET }}
+          HCP_PACKER_BUILD_FINGERPRINT: "run.id.${{ github.run_id }}.run.attempt.${{ github.run_attempt }}"
+```
+
 ## Author Information

 This GitHub Action is maintained by the contributors listed on [GitHub](https://github.com/hashicorp/setup-packer/graphs/contributors).
--- a/action.yml
+++ b/action.yml
@@ -1,3 +1,6 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: Apache-2.0
+
 ---

 name: "Setup HashiCorp Packer"
--- a/dist/index.js.map
+++ b/dist/index.js.map
@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oDAAsC;AACtC,mEAAqD;AAErD,SAAe,IAAI;;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QACxC,IAAI,OAAO,IAAI,IAAI,EAAE;YACnB,IAAI,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAA;YAClD,OAAM;SACP;QACD,IAAI;YACF,MAAM,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;SACjD;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,KAAK,YAAY,KAAK,EAAE;gBAC1B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;aAC/B;SACF;IACH,CAAC;CAAA;AAED,IAAI,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,oDAAsC;AACtC,mEAAqD;AAErD,SAAe,IAAI;;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,OAAO,IAAI,IAAI,EAAE;YACnB,IAAI,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;YACnD,OAAO;SACR;QACD,IAAI;YACF,MAAM,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;SACjD;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,KAAK,YAAY,KAAK,EAAE;gBAC1B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;aAC/B;SACF;IACH,CAAC;CAAA;AAED,IAAI,EAAE,CAAC"}
--- a/examples/hcp-packer.yml
+++ b/examples/hcp-packer.yml
@@ -0,0 +1,31 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: Apache-2.0
+
+name: hcp-packer
+on:
+  - push
+jobs:
+  hcp-packer:
+    runs-on: ubuntu-latest
+    name: Run Packer
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Setup `packer`
+        uses: hashicorp/setup-packer@main
+        id: setup
+        with:
+          version: "latest"
+      - name: Run `packer init`
+        id: init
+        run: "packer init ./image.pkr.hcl"
+      - name: Run `packer validate`
+        id: validate
+        run: "packer validate ./image.pkr.hcl"
+
+      - name: Build Artifact
+        run: packer build -color=false -on-error=abort image.pkr.hcl
+        env:
+          HCP_CLIENT_ID: ${{ secrets.HCP_CLIENT_ID }}
+          HCP_CLIENT_SECRET: ${{ secrets.HCP_CLIENT_SECRET }}
+          HCP_PACKER_BUILD_FINGERPRINT: run.id.${{ github.run_id }}.run.attempt.${{ github.run_attempt }}
--- a/examples/packer.yml
+++ b/examples/packer.yml
@@ -0,0 +1,29 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: Apache-2.0
+
+name: packer
+
+on:
+  - push
+
+jobs:
+  packer:
+    runs-on: ubuntu-latest
+    name: Run Packer
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Setup `packer`
+        uses: hashicorp/setup-packer@main
+        id: setup
+        with:
+          version: "1.8.6" # or latest
+
+      - name: Run `packer init`
+        id: init
+        run: "packer init ./image.pkr.hcl"
+
+      - name: Run `packer validate`
+        id: validate
+        run: "packer validate ./image.pkr.hcl"
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,31 +1,31 @@
 {
  "name": "setup-packer",
-  "version": "2.0.0",
+  "version": "2.1.0",
  "lockfileVersion": 2,
  "requires": true,
  "packages": {
    "": {
      "name": "setup-packer",
-      "version": "2.0.0",
+      "version": "2.1.0",
      "license": "Apache-2.0",
      "dependencies": {
-        "@actions/core": "^1.10.0",
-        "@actions/io": "^1.1.2",
-        "@actions/tool-cache": "^2.0.1",
-        "@hashicorp/github-actions-core": "github:hashicorp/github-actions-core#v0.2.0",
-        "@vercel/ncc": "^0.36.0"
+        "@actions/core": "1.10.1",
+        "@actions/io": "1.1.3",
+        "@actions/tool-cache": "2.0.1",
+        "@hashicorp/github-actions-core": "github:hashicorp/github-actions-core#v0.3.1",
+        "@vercel/ncc": "0.36.1"
      },
      "devDependencies": {
-        "@types/node": "^18.11.11",
-        "@types/semver": "^7.3.13",
-        "prettier": "^2.8.0",
-        "typescript": "^4.9.3"
+        "@types/node": "18.14.1",
+        "@types/semver": "7.5.4",
+        "prettier": "2.8.4",
+        "typescript": "4.9.5"
      }
    },
    "node_modules/@actions/core": {
-      "version": "1.10.0",
-      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.10.0.tgz",
-      "integrity": "sha512-2aZDDa3zrrZbP5ZYg159sNoLRb61nQ7awl5pSvIq5Qpj81vwDzdMRKzkWJGJuwVvWpvZKx7vspJALyvaaIQyug==",
+      "version": "1.10.1",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.10.1.tgz",
+      "integrity": "sha512-3lBR9EDAY+iYIpTnTIXmWcNbX3T2kCkAEQGIQx4NVQ0575nk2k3GRZDTPQG+vVtS2izSLmINlxXf0uLtnrTP+g==",
      "dependencies": {
        "@actions/http-client": "^2.0.1",
        "uuid": "^8.3.2"
@@ -40,17 +40,18 @@
      }
    },
    "node_modules/@actions/http-client": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-2.0.1.tgz",
-      "integrity": "sha512-PIXiMVtz6VvyaRsGY268qvj57hXQEpsYogYOu2nrQhlf+XCGmZstmuZBbAybUl1nQGnvS1k1eEsQ69ZoD7xlSw==",
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-2.2.0.tgz",
+      "integrity": "sha512-q+epW0trjVUUHboliPb4UF9g2msf+w61b32tAkFEwL/IwP0DQWgbCMM0Hbe3e3WXSKz5VcUXbzJQgy8Hkra/Lg==",
      "dependencies": {
-        "tunnel": "^0.0.6"
+        "tunnel": "^0.0.6",
+        "undici": "^5.25.4"
      }
    },
    "node_modules/@actions/io": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.2.tgz",
-      "integrity": "sha512-d+RwPlMp+2qmBfeLYPLXuSRykDIFEwdTA0MMxzS9kh4kvP1ftrc/9fzy6pX6qAjthdXruHQ6/6kjT/DNo5ALuw=="
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.3.tgz",
+      "integrity": "sha512-wi9JjgKLYS7U/z8PPbco+PvTb/nRWjeoFlJ1Qer83k/3C5PHQi28hiVdeE2kHXmIL99mQFawx8qt/JPjZilJ8Q=="
    },
    "node_modules/@actions/tool-cache": {
      "version": "2.0.1",
@@ -74,22 +75,30 @@
        "uuid": "bin/uuid"
      }
    },
+    "node_modules/@fastify/busboy": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@fastify/busboy/-/busboy-2.0.0.tgz",
+      "integrity": "sha512-JUFJad5lv7jxj926GPgymrWQxxjPYuJNiNjNMzqT+HiuP6Vl3dk5xzG+8sTX96np0ZAluvaMzPsjhHZ5rNuNQQ==",
+      "engines": {
+        "node": ">=14"
+      }
+    },
    "node_modules/@hashicorp/github-actions-core": {
-      "version": "0.1.0",
-      "resolved": "git+ssh://git@github.com/hashicorp/github-actions-core.git#d0edc4c9019939f83bef32882bf9576ba58d8017",
-      "license": "MPL-2.0",
+      "version": "0.3.1",
+      "resolved": "git+ssh://git@github.com/hashicorp/github-actions-core.git#4305a2bf15b10283f92b84875ef8454c1ec6086c",
+      "license": "Apache-2.0",
      "dependencies": {
-        "@actions/core": "^1.10.0",
-        "@actions/io": "^1.1.2",
+        "@actions/core": "^1.10.1",
+        "@actions/io": "^1.1.3",
        "@actions/tool-cache": "^2.0.1",
-        "@hashicorp/js-releases": "^1.6.1",
-        "semver": "^7.3.8"
+        "@hashicorp/js-releases": "^1.7.0",
+        "semver": "^7.5.3"
      }
    },
    "node_modules/@hashicorp/github-actions-core/node_modules/semver": {
-      "version": "7.3.8",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.8.tgz",
-      "integrity": "sha512-NB1ctGL5rlHrPJtFDVIVzTyQylMLu9N9VICA6HSFJo8MCGVTMW6gfpicwKmmK/dAjTOrqu5l63JJOpDSrAis3A==",
+      "version": "7.5.4",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.5.4.tgz",
+      "integrity": "sha512-1bCSESV6Pv+i21Hvpxp3Dx+pSD8lIPt8uVjRrxAUt/nbswYc+tK6Y2btiULjd4+fnq15PX+nqQDC7Oft7WkwcA==",
      "dependencies": {
        "lru-cache": "^6.0.0"
      },
@@ -101,21 +110,21 @@
      }
    },
    "node_modules/@hashicorp/js-releases": {
-      "version": "1.6.1",
-      "resolved": "https://registry.npmjs.org/@hashicorp/js-releases/-/js-releases-1.6.1.tgz",
-      "integrity": "sha512-eb8NgI+oTrQ1BWioenKSCH8a90uLngeaVkyMOXofPLPcShJwhc/AAJpzP5AZoYCGrbt1nVJmFGgjUrS858YLBw==",
+      "version": "1.7.0",
+      "resolved": "https://registry.npmjs.org/@hashicorp/js-releases/-/js-releases-1.7.0.tgz",
+      "integrity": "sha512-ONeN2lH5qeZU+wK32CschZEPe+NB9ypGzsfCpEQgA87oGMEkWX66s95bLYN4ff+WirBWYvyvHxGLT1MWbj/m9A==",
      "dependencies": {
        "axios": "^0.25.0",
        "https-proxy-agent": "^5.0.1",
-        "openpgp": "5.1.0",
+        "openpgp": "^5.5.0",
        "semver": "^7.3.5",
        "yauzl": "^2.10.0"
      }
    },
    "node_modules/@hashicorp/js-releases/node_modules/semver": {
-      "version": "7.3.8",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.8.tgz",
-      "integrity": "sha512-NB1ctGL5rlHrPJtFDVIVzTyQylMLu9N9VICA6HSFJo8MCGVTMW6gfpicwKmmK/dAjTOrqu5l63JJOpDSrAis3A==",
+      "version": "7.5.4",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.5.4.tgz",
+      "integrity": "sha512-1bCSESV6Pv+i21Hvpxp3Dx+pSD8lIPt8uVjRrxAUt/nbswYc+tK6Y2btiULjd4+fnq15PX+nqQDC7Oft7WkwcA==",
      "dependencies": {
        "lru-cache": "^6.0.0"
      },
@@ -127,21 +136,21 @@
      }
    },
    "node_modules/@types/node": {
-      "version": "18.11.11",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-18.11.11.tgz",
-      "integrity": "sha512-KJ021B1nlQUBLopzZmPBVuGU9un7WJd/W4ya7Ih02B4Uwky5Nja0yGYav2EfYIk0RR2Q9oVhf60S2XR1BCWJ2g==",
+      "version": "18.14.1",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-18.14.1.tgz",
+      "integrity": "sha512-QH+37Qds3E0eDlReeboBxfHbX9omAcBCXEzswCu6jySP642jiM3cYSIkU/REqwhCUqXdonHFuBfJDiAJxMNhaQ==",
      "dev": true
    },
    "node_modules/@types/semver": {
-      "version": "7.3.13",
-      "resolved": "https://registry.npmjs.org/@types/semver/-/semver-7.3.13.tgz",
-      "integrity": "sha512-21cFJr9z3g5dW8B0CVI9g2O9beqaThGQ6ZFBqHfwhzLDKUxaqTIy3vnfah/UPkfOiF2pLq+tGz+W8RyCskuslw==",
+      "version": "7.5.4",
+      "resolved": "https://registry.npmjs.org/@types/semver/-/semver-7.5.4.tgz",
+      "integrity": "sha512-MMzuxN3GdFwskAnb6fz0orFvhfqi752yjaXylr0Rp4oDg5H0Zn1IuyRhDVvYOwAXoJirx2xuS16I3WjxnAIHiQ==",
      "dev": true
    },
    "node_modules/@vercel/ncc": {
-      "version": "0.36.0",
-      "resolved": "https://registry.npmjs.org/@vercel/ncc/-/ncc-0.36.0.tgz",
-      "integrity": "sha512-/ZTUJ/ZkRt694k7KJNimgmHjtQcRuVwsST2Z6XfYveQIuBbHR+EqkTc1jfgPkQmMyk/vtpxo3nVxe8CNuau86A==",
+      "version": "0.36.1",
+      "resolved": "https://registry.npmjs.org/@vercel/ncc/-/ncc-0.36.1.tgz",
+      "integrity": "sha512-S4cL7Taa9yb5qbv+6wLgiKVZ03Qfkc4jGRuiUQMQ8HGBD5pcNRnHeYM33zBvJE4/zJGjJJ8GScB+WmTsn9mORw==",
      "bin": {
        "ncc": "dist/ncc/cli.js"
      }
@@ -214,9 +223,9 @@
      }
    },
    "node_modules/follow-redirects": {
-      "version": "1.15.2",
-      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.2.tgz",
-      "integrity": "sha512-VQLG33o04KaQ8uYi2tVNbdrWp1QWxNNea+nmIB4EVM28v0hmP17z7aG1+wAkNzVq4KeXTq3221ye5qTJP91JwA==",
+      "version": "1.15.3",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.3.tgz",
+      "integrity": "sha512-1VzOtuEM8pC9SFU1E+8KfTjZyMztRsgEfwQl44z8A25uy13jSzTj6dyK2Df52iV0vgHCfBwLhDWevLn95w5v6Q==",
      "funding": [
        {
          "type": "individual",
@@ -271,9 +280,9 @@
      "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
    },
    "node_modules/openpgp": {
-      "version": "5.1.0",
-      "resolved": "https://registry.npmjs.org/openpgp/-/openpgp-5.1.0.tgz",
-      "integrity": "sha512-keCno6QPMXWwfjrOOtT8fwZ5XgCcB7vZH80xb44SbJ49qQ11Efl2fFfqHpaie7jTQFjRKxgT8hSFPXJUjogNPw==",
+      "version": "5.10.2",
+      "resolved": "https://registry.npmjs.org/openpgp/-/openpgp-5.10.2.tgz",
+      "integrity": "sha512-nRqMp4o31rBagWB02tgfKCsocXWq4uYobZf9GDVlD5rQXBq/wRIZHiDhGX1dlDAI2inkZcPd2dSZOqmtGnsK1A==",
      "dependencies": {
        "asn1.js": "^5.0.0"
      },
@@ -287,9 +296,9 @@
      "integrity": "sha512-F3asv42UuXchdzt+xXqfW1OGlVBe+mxa2mqI0pg5yAHZPvFmY3Y6drSf/GQ1A86WgWEN9Kzh/WrgKa6iGcHXLg=="
    },
    "node_modules/prettier": {
-      "version": "2.8.0",
-      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.8.0.tgz",
-      "integrity": "sha512-9Lmg8hTFZKG0Asr/kW9Bp8tJjRVluO8EJQVfY2T7FMw9T5jy4I/Uvx0Rca/XWf50QQ1/SS48+6IJWnrb+2yemA==",
+      "version": "2.8.4",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.8.4.tgz",
+      "integrity": "sha512-vIS4Rlc2FNh0BySk3Wkd6xmwxB0FpOndW5fisM5H8hsZSxU2VWVB5CWIkIjWvrHjIhxk2g3bfMKM87zNTrZddw==",
      "dev": true,
      "bin": {
        "prettier": "bin-prettier.js"
@@ -307,9 +316,9 @@
      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="
    },
    "node_modules/semver": {
-      "version": "6.3.0",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz",
-      "integrity": "sha512-b39TBaTSfV6yBrapU89p5fKekE2m/NwnDocOVruQFS1/veMgdzuPcnOM34M6CwxW8jH/lxEa5rBoDeUwu5HHTw==",
+      "version": "6.3.1",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz",
+      "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==",
      "bin": {
        "semver": "bin/semver.js"
      }
@@ -323,9 +332,9 @@
      }
    },
    "node_modules/typescript": {
-      "version": "4.9.3",
-      "resolved": "https://registry.npmjs.org/typescript/-/typescript-4.9.3.tgz",
-      "integrity": "sha512-CIfGzTelbKNEnLpLdGFgdyKhG23CKdKgQPOBc+OUNrkJ2vr+KSzsSV5kq5iWhEQbok+quxgGzrAtGWCyU7tHnA==",
+      "version": "4.9.5",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-4.9.5.tgz",
+      "integrity": "sha512-1FXk9E2Hm+QzZQ7z+McJiHL4NW1F2EzMu9Nq9i3zAaGqibafqYwCVU6WyWAuyQRRzOlxou8xZSyXLEN8oKj24g==",
      "dev": true,
      "bin": {
        "tsc": "bin/tsc",
@@ -335,6 +344,17 @@
        "node": ">=4.2.0"
      }
    },
+    "node_modules/undici": {
+      "version": "5.26.4",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-5.26.4.tgz",
+      "integrity": "sha512-OG+QOf0fTLtazL9P9X7yqWxQ+Z0395Wk6DSkyTxtaq3wQEjIroVe7Y4asCX/vcCxYpNGMnwz8F0qbRYUoaQVMw==",
+      "dependencies": {
+        "@fastify/busboy": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=14.0"
+      }
+    },
    "node_modules/uuid": {
      "version": "8.3.2",
      "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
@@ -360,9 +380,9 @@
  },
  "dependencies": {
    "@actions/core": {
-      "version": "1.10.0",
-      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.10.0.tgz",
-      "integrity": "sha512-2aZDDa3zrrZbP5ZYg159sNoLRb61nQ7awl5pSvIq5Qpj81vwDzdMRKzkWJGJuwVvWpvZKx7vspJALyvaaIQyug==",
+      "version": "1.10.1",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.10.1.tgz",
+      "integrity": "sha512-3lBR9EDAY+iYIpTnTIXmWcNbX3T2kCkAEQGIQx4NVQ0575nk2k3GRZDTPQG+vVtS2izSLmINlxXf0uLtnrTP+g==",
      "requires": {
        "@actions/http-client": "^2.0.1",
        "uuid": "^8.3.2"
@@ -377,17 +397,18 @@
      }
    },
    "@actions/http-client": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-2.0.1.tgz",
-      "integrity": "sha512-PIXiMVtz6VvyaRsGY268qvj57hXQEpsYogYOu2nrQhlf+XCGmZstmuZBbAybUl1nQGnvS1k1eEsQ69ZoD7xlSw==",
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-2.2.0.tgz",
+      "integrity": "sha512-q+epW0trjVUUHboliPb4UF9g2msf+w61b32tAkFEwL/IwP0DQWgbCMM0Hbe3e3WXSKz5VcUXbzJQgy8Hkra/Lg==",
      "requires": {
-        "tunnel": "^0.0.6"
+        "tunnel": "^0.0.6",
+        "undici": "^5.25.4"
      }
    },
    "@actions/io": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.2.tgz",
-      "integrity": "sha512-d+RwPlMp+2qmBfeLYPLXuSRykDIFEwdTA0MMxzS9kh4kvP1ftrc/9fzy6pX6qAjthdXruHQ6/6kjT/DNo5ALuw=="
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.3.tgz",
+      "integrity": "sha512-wi9JjgKLYS7U/z8PPbco+PvTb/nRWjeoFlJ1Qer83k/3C5PHQi28hiVdeE2kHXmIL99mQFawx8qt/JPjZilJ8Q=="
    },
    "@actions/tool-cache": {
      "version": "2.0.1",
@@ -409,21 +430,26 @@
        }
      }
    },
+    "@fastify/busboy": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@fastify/busboy/-/busboy-2.0.0.tgz",
+      "integrity": "sha512-JUFJad5lv7jxj926GPgymrWQxxjPYuJNiNjNMzqT+HiuP6Vl3dk5xzG+8sTX96np0ZAluvaMzPsjhHZ5rNuNQQ=="
+    },
    "@hashicorp/github-actions-core": {
-      "version": "git+ssh://git@github.com/hashicorp/github-actions-core.git#d0edc4c9019939f83bef32882bf9576ba58d8017",
-      "from": "@hashicorp/github-actions-core@github:hashicorp/github-actions-core#v0.2.0",
+      "version": "git+ssh://git@github.com/hashicorp/github-actions-core.git#4305a2bf15b10283f92b84875ef8454c1ec6086c",
+      "from": "@hashicorp/github-actions-core@github:hashicorp/github-actions-core#v0.3.1",
      "requires": {
-        "@actions/core": "^1.10.0",
-        "@actions/io": "^1.1.2",
+        "@actions/core": "^1.10.1",
+        "@actions/io": "^1.1.3",
        "@actions/tool-cache": "^2.0.1",
-        "@hashicorp/js-releases": "^1.6.1",
-        "semver": "^7.3.8"
+        "@hashicorp/js-releases": "^1.7.0",
+        "semver": "^7.5.3"
      },
      "dependencies": {
        "semver": {
-          "version": "7.3.8",
-          "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.8.tgz",
-          "integrity": "sha512-NB1ctGL5rlHrPJtFDVIVzTyQylMLu9N9VICA6HSFJo8MCGVTMW6gfpicwKmmK/dAjTOrqu5l63JJOpDSrAis3A==",
+          "version": "7.5.4",
+          "resolved": "https://registry.npmjs.org/semver/-/semver-7.5.4.tgz",
+          "integrity": "sha512-1bCSESV6Pv+i21Hvpxp3Dx+pSD8lIPt8uVjRrxAUt/nbswYc+tK6Y2btiULjd4+fnq15PX+nqQDC7Oft7WkwcA==",
          "requires": {
            "lru-cache": "^6.0.0"
          }
@@ -431,21 +457,21 @@
      }
    },
    "@hashicorp/js-releases": {
-      "version": "1.6.1",
-      "resolved": "https://registry.npmjs.org/@hashicorp/js-releases/-/js-releases-1.6.1.tgz",
-      "integrity": "sha512-eb8NgI+oTrQ1BWioenKSCH8a90uLngeaVkyMOXofPLPcShJwhc/AAJpzP5AZoYCGrbt1nVJmFGgjUrS858YLBw==",
+      "version": "1.7.0",
+      "resolved": "https://registry.npmjs.org/@hashicorp/js-releases/-/js-releases-1.7.0.tgz",
+      "integrity": "sha512-ONeN2lH5qeZU+wK32CschZEPe+NB9ypGzsfCpEQgA87oGMEkWX66s95bLYN4ff+WirBWYvyvHxGLT1MWbj/m9A==",
      "requires": {
        "axios": "^0.25.0",
        "https-proxy-agent": "^5.0.1",
-        "openpgp": "5.1.0",
+        "openpgp": "^5.5.0",
        "semver": "^7.3.5",
        "yauzl": "^2.10.0"
      },
      "dependencies": {
        "semver": {
-          "version": "7.3.8",
-          "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.8.tgz",
-          "integrity": "sha512-NB1ctGL5rlHrPJtFDVIVzTyQylMLu9N9VICA6HSFJo8MCGVTMW6gfpicwKmmK/dAjTOrqu5l63JJOpDSrAis3A==",
+          "version": "7.5.4",
+          "resolved": "https://registry.npmjs.org/semver/-/semver-7.5.4.tgz",
+          "integrity": "sha512-1bCSESV6Pv+i21Hvpxp3Dx+pSD8lIPt8uVjRrxAUt/nbswYc+tK6Y2btiULjd4+fnq15PX+nqQDC7Oft7WkwcA==",
          "requires": {
            "lru-cache": "^6.0.0"
          }
@@ -453,21 +479,21 @@
      }
    },
    "@types/node": {
-      "version": "18.11.11",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-18.11.11.tgz",
-      "integrity": "sha512-KJ021B1nlQUBLopzZmPBVuGU9un7WJd/W4ya7Ih02B4Uwky5Nja0yGYav2EfYIk0RR2Q9oVhf60S2XR1BCWJ2g==",
+      "version": "18.14.1",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-18.14.1.tgz",
+      "integrity": "sha512-QH+37Qds3E0eDlReeboBxfHbX9omAcBCXEzswCu6jySP642jiM3cYSIkU/REqwhCUqXdonHFuBfJDiAJxMNhaQ==",
      "dev": true
    },
    "@types/semver": {
-      "version": "7.3.13",
-      "resolved": "https://registry.npmjs.org/@types/semver/-/semver-7.3.13.tgz",
-      "integrity": "sha512-21cFJr9z3g5dW8B0CVI9g2O9beqaThGQ6ZFBqHfwhzLDKUxaqTIy3vnfah/UPkfOiF2pLq+tGz+W8RyCskuslw==",
+      "version": "7.5.4",
+      "resolved": "https://registry.npmjs.org/@types/semver/-/semver-7.5.4.tgz",
+      "integrity": "sha512-MMzuxN3GdFwskAnb6fz0orFvhfqi752yjaXylr0Rp4oDg5H0Zn1IuyRhDVvYOwAXoJirx2xuS16I3WjxnAIHiQ==",
      "dev": true
    },
    "@vercel/ncc": {
-      "version": "0.36.0",
-      "resolved": "https://registry.npmjs.org/@vercel/ncc/-/ncc-0.36.0.tgz",
-      "integrity": "sha512-/ZTUJ/ZkRt694k7KJNimgmHjtQcRuVwsST2Z6XfYveQIuBbHR+EqkTc1jfgPkQmMyk/vtpxo3nVxe8CNuau86A=="
+      "version": "0.36.1",
+      "resolved": "https://registry.npmjs.org/@vercel/ncc/-/ncc-0.36.1.tgz",
+      "integrity": "sha512-S4cL7Taa9yb5qbv+6wLgiKVZ03Qfkc4jGRuiUQMQ8HGBD5pcNRnHeYM33zBvJE4/zJGjJJ8GScB+WmTsn9mORw=="
    },
    "agent-base": {
      "version": "6.0.2",
@@ -523,9 +549,9 @@
      }
    },
    "follow-redirects": {
-      "version": "1.15.2",
-      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.2.tgz",
-      "integrity": "sha512-VQLG33o04KaQ8uYi2tVNbdrWp1QWxNNea+nmIB4EVM28v0hmP17z7aG1+wAkNzVq4KeXTq3221ye5qTJP91JwA=="
+      "version": "1.15.3",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.3.tgz",
+      "integrity": "sha512-1VzOtuEM8pC9SFU1E+8KfTjZyMztRsgEfwQl44z8A25uy13jSzTj6dyK2Df52iV0vgHCfBwLhDWevLn95w5v6Q=="
    },
    "https-proxy-agent": {
      "version": "5.0.1",
@@ -560,9 +586,9 @@
      "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
    },
    "openpgp": {
-      "version": "5.1.0",
-      "resolved": "https://registry.npmjs.org/openpgp/-/openpgp-5.1.0.tgz",
-      "integrity": "sha512-keCno6QPMXWwfjrOOtT8fwZ5XgCcB7vZH80xb44SbJ49qQ11Efl2fFfqHpaie7jTQFjRKxgT8hSFPXJUjogNPw==",
+      "version": "5.10.2",
+      "resolved": "https://registry.npmjs.org/openpgp/-/openpgp-5.10.2.tgz",
+      "integrity": "sha512-nRqMp4o31rBagWB02tgfKCsocXWq4uYobZf9GDVlD5rQXBq/wRIZHiDhGX1dlDAI2inkZcPd2dSZOqmtGnsK1A==",
      "requires": {
        "asn1.js": "^5.0.0"
      }
@@ -573,9 +599,9 @@
      "integrity": "sha512-F3asv42UuXchdzt+xXqfW1OGlVBe+mxa2mqI0pg5yAHZPvFmY3Y6drSf/GQ1A86WgWEN9Kzh/WrgKa6iGcHXLg=="
    },
    "prettier": {
-      "version": "2.8.0",
-      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.8.0.tgz",
-      "integrity": "sha512-9Lmg8hTFZKG0Asr/kW9Bp8tJjRVluO8EJQVfY2T7FMw9T5jy4I/Uvx0Rca/XWf50QQ1/SS48+6IJWnrb+2yemA==",
+      "version": "2.8.4",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.8.4.tgz",
+      "integrity": "sha512-vIS4Rlc2FNh0BySk3Wkd6xmwxB0FpOndW5fisM5H8hsZSxU2VWVB5CWIkIjWvrHjIhxk2g3bfMKM87zNTrZddw==",
      "dev": true
    },
    "safer-buffer": {
@@ -584,9 +610,9 @@
      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="
    },
    "semver": {
-      "version": "6.3.0",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz",
-      "integrity": "sha512-b39TBaTSfV6yBrapU89p5fKekE2m/NwnDocOVruQFS1/veMgdzuPcnOM34M6CwxW8jH/lxEa5rBoDeUwu5HHTw=="
+      "version": "6.3.1",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz",
+      "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA=="
    },
    "tunnel": {
      "version": "0.0.6",
@@ -594,11 +620,19 @@
      "integrity": "sha512-1h/Lnq9yajKY2PEbBadPXj3VxsDDu844OnaAo52UVmIzIvwwtBPIuNvkjuzBlTWpfJyUbG3ez0KSBibQkj4ojg=="
    },
    "typescript": {
-      "version": "4.9.3",
-      "resolved": "https://registry.npmjs.org/typescript/-/typescript-4.9.3.tgz",
-      "integrity": "sha512-CIfGzTelbKNEnLpLdGFgdyKhG23CKdKgQPOBc+OUNrkJ2vr+KSzsSV5kq5iWhEQbok+quxgGzrAtGWCyU7tHnA==",
+      "version": "4.9.5",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-4.9.5.tgz",
+      "integrity": "sha512-1FXk9E2Hm+QzZQ7z+McJiHL4NW1F2EzMu9Nq9i3zAaGqibafqYwCVU6WyWAuyQRRzOlxou8xZSyXLEN8oKj24g==",
      "dev": true
    },
+    "undici": {
+      "version": "5.26.4",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-5.26.4.tgz",
+      "integrity": "sha512-OG+QOf0fTLtazL9P9X7yqWxQ+Z0395Wk6DSkyTxtaq3wQEjIroVe7Y4asCX/vcCxYpNGMnwz8F0qbRYUoaQVMw==",
+      "requires": {
+        "@fastify/busboy": "^2.0.0"
+      }
+    },
    "uuid": {
      "version": "8.3.2",
      "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "setup-packer",
-  "version": "2.0.0",
+  "version": "2.1.0",
  "description": "A GitHub Action to install a specific version of HashiCorp Packer and add it to PATH.",
  "keywords": [
    "github-actions",
@@ -19,16 +19,16 @@
    "fmt": "prettier --write 'src/*.ts'"
  },
  "dependencies": {
-    "@actions/core": "^1.10.0",
-    "@actions/io": "^1.1.2",
-    "@actions/tool-cache": "^2.0.1",
-    "@hashicorp/github-actions-core": "github:hashicorp/github-actions-core#v0.2.0",
-    "@vercel/ncc": "^0.36.0"
+    "@actions/core": "1.10.1",
+    "@actions/io": "1.1.3",
+    "@actions/tool-cache": "2.0.1",
+    "@hashicorp/github-actions-core": "github:hashicorp/github-actions-core#v0.3.1",
+    "@vercel/ncc": "0.36.1"
  },
  "devDependencies": {
-    "@types/node": "^18.11.11",
-    "@types/semver": "^7.3.13",
-    "prettier": "^2.8.0",
-    "typescript": "^4.9.3"
+    "@types/node": "18.14.1",
+    "@types/semver": "7.5.4",
+    "prettier": "2.8.4",
+    "typescript": "4.9.5"
  }
 }
--- a/src/index.ts
+++ b/src/index.ts
@@ -1,11 +1,16 @@
+/**
+ * Copyright (c) HashiCorp, Inc.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
 import * as core from "@actions/core";
 import * as hc from "@hashicorp/github-actions-core";

 async function main() {
-  const version = core.getInput("version")
+  const version = core.getInput("version");
  if (version == null) {
-    core.setFailed("Required field 'version' not set")
-    return
+    core.setFailed("Required field 'version' not set");
+    return;
  }
  try {
    await hc.getHashicorpRelease("packer", version);
--- a/test/hello-world.pkr.hcl
+++ b/test/hello-world.pkr.hcl
@@ -1,16 +1,19 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: Apache-2.0
+
 # file: builds.pkr.hcl
 source "file" "basic-example" {
  content = "Lorem ipsum dolor sit amet"
-  target = "sample_artifact"
+  target  = "sample_artifact"
 }

 variable "bucket_name" {
-  type = string
+  type    = string
  default = "hello-world"
 }

 build {
-   hcp_packer_registry {
+  hcp_packer_registry {
    bucket_name = "${var.bucket_name}"

    description = <<EOT
@@ -19,7 +22,7 @@ Some nice description about the image which artifact is being published to HCP P

    labels = {
      "foo-version" = "3.4.0",
-      "foo" = "bar",
+      "foo"         = "bar",
    }
  }
Author	SHA1	Message	Date
Jenna Goldstrich	ecc5516821	Update Github-Actions-Core, Semver, remove Snyk (#87 ) * Update Github-Actions-Core to mitigate semver CVE * Bump io/tool cache to the same version used in core * Remove Snyk	2023-11-15 09:41:06 -08:00
hashicorp-tsccr[bot]	fb333f6658	Result of tsccr-helper -log-level=info -pin-all-workflows . (#84 ) Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>	2023-09-13 17:02:32 +02:00
Jenna Goldstrich	35eb25af04	Update README.md (#83 )	2023-08-17 10:06:37 -07:00
Kerim Satirli	367b335854	alignment and maintenance (#77 ) * set product version as variable * use slim version of linter * use check mode for self-test * adds copywrite bot config and headers * bumps `github-actions-core` from `0.2.0` to `0.3.0` * bumps version to `2.1.0`	2023-03-15 10:41:30 +01:00
Jenna Goldstrich	d345de254e	Add YAML encoding to HCP Packer example	2023-03-07 15:10:01 -08:00
Jenna Goldstrich	e7171338be	Update readme with consistent file definition for packer templates	2023-03-07 15:09:24 -08:00
Jenna Goldstrich	18fbd16177	Add examples for HCP Packer (#76 ) * Add examples for HCP Packer * Update README.md Co-authored-by: Kerim Satirli <ksatirli@users.noreply.github.com> * Update README.md Co-authored-by: Kerim Satirli <ksatirli@users.noreply.github.com> * job name should be hcp packer * Add Kerim's suggested synk changes * add run id * Update README.md Co-authored-by: Alan Szlosek Jr <alan.szlosek@gmail.com> * Update examples/hcp-packer.yml Co-authored-by: Alan Szlosek Jr <alan.szlosek@gmail.com> * Update README.md Co-authored-by: Alan Szlosek Jr <alan.szlosek@gmail.com> * fix fingerprint --------- Co-authored-by: Kerim Satirli <ksatirli@users.noreply.github.com> Co-authored-by: Alan Szlosek Jr <alan.szlosek@gmail.com>	2023-03-07 15:07:46 -08:00
Kerim Satirli	d5c2c40d11	Maintenance (#74 ) * linting * docs linting * bumps package versions to latest known working versions * update self-test and makes it branch aware * use existing version for base test * linting	2023-03-07 10:33:00 -08:00
hashicorp-copywrite[bot]	c666f87d3e	[COMPLIANCE] Add Copyright and License Headers (#73 ) Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com>	2023-02-02 10:26:05 +01:00
Jenna Goldstrich	86de60ecdd	Update README.md	2022-12-08 16:29:42 -08:00