action.yml

name: 'Get a GitHub token'
description: 'Get a GitHub token. If `token` is passed, it will be used. Otherwise, an app token will be generated.'

inputs:
  token:
    description: 'GitHub token to use. If passed, takes precedence over the `app-id` and `app-private-key` inputs.'

  app-id:
    description: 'The app ID of the app.'

  private-key:
    description: 'The private key of the app.'

  owner:
    description: 'The owner of the GitHub App installation (defaults to current repository owner)'
    required: false

  repositories:
    description: 'Repositories to install the GitHub App on (defaults to current repository if owner is unset)'
    required: false

  skip-token-revoke:
    description: 'If truthy, the token will not be revoked when the current job is complete'
    required: false

  github-api-url:
    description: 'The URL of the GitHub REST API.'
    default: ${{ github.api_url }}

outputs:
  token:
    description: 'The GitHub token.'
    value: ${{ steps.token.outputs.token || steps.app.outputs.token }}

runs:
  using: composite
  steps:
    - name: 'Log'
      id: log
      shell: bash
      #language=bash
      run: |
        if [ -n "${{ inputs.github-token }}" ]; then
          echo "Using GitHub token."
        elif [ -n "${{ inputs.app-id }}" ] && [ -n "${{ inputs.private-key }}" ]; then
          echo "Using app credentials."
        fi

    - id: app
      if: inputs.token == '' && (inputs.app-id != '' || inputs.private-key != '')
      uses: myparcelnl/actions/setup-app-credentials@v4
      with:
        app-id: ${{ inputs.app-id }}
        private-key: ${{ inputs.private-key }}
        owner: ${{ inputs.owner }}
        repositories: ${{ inputs.repositories }}
        skip-token-revoke: ${{ inputs.skip-token-revoke }}
        github-api-url: ${{ inputs.github-api-url }}

    - id: token
      if: inputs.token != ''
      shell: bash
      #language=bash
      run: |
        echo "token=${{ inputs.token }}" >> $GITHUB_OUTPUT

    - id: error
      if: inputs.token == '' && (inputs.app-id == '' || inputs.private-key == '')
      shell: bash
      #language=bash
      run: |
        echo "::error::No GitHub token or app credentials provided."
        exit 1