use Octokit client to download buildx

Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>

Author: crazy-max

.github/workflows/test.yml

@@ -30,6 +30,8 @@ jobs:
         uses: docker/bake-action@v2
         with:
           targets: test
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       -
         name: Upload coverage
         uses: codecov/codecov-action@v3

__tests__/buildx.test.ts

@@ -221,7 +221,7 @@ describe('install', () => {
   ])(
     'acquires %p of buildx (standalone: %p)',
     async (version, standalone) => {
-      const buildxBin = await buildx.install(version, tmpDir, standalone);
+      const buildxBin = await buildx.install(version, process.env.GITHUB_TOKEN || '', tmpDir, standalone);
       expect(fs.existsSync(buildxBin)).toBe(true);
     },
     100000

__tests__/github.test.ts

@@ -3,14 +3,18 @@ import * as github from '../src/github';
 
 describe('github', () => {
   it('returns latest buildx GitHub release', async () => {
-    const release = await github.getRelease('latest');
+    const release = await github.getLatestRelease(process.env.GITHUB_TOKEN || '');
     expect(release).not.toBeNull();
     expect(release?.tag_name).not.toEqual('');
   });
 
   it('returns v0.2.2 buildx GitHub release', async () => {
-    const release = await github.getRelease('v0.2.2');
+    const release = await github.getReleaseTag('v0.2.2', process.env.GITHUB_TOKEN || '');
     expect(release).not.toBeNull();
     expect(release?.tag_name).toEqual('v0.2.2');
   });
+
+  it('unknown release', async () => {
+    await expect(github.getReleaseTag('foo', process.env.GITHUB_TOKEN || '')).rejects.toThrowError(new Error('Cannot get release foo: HttpError: Not Found'));
+  });
 });

action.yml

@@ -44,6 +44,10 @@ inputs:
   append:
     description: 'Append additional nodes to the builder'
     required: false
+  github_token:
+    description: 'The GitHub token used to create an authenticated client for GitHub API'
+    default: ${{ github.token }}
+    required: false
 
 outputs:
   name:

dev.Dockerfile

@@ -72,7 +72,8 @@ RUN --mount=type=bind,target=.,rw \
   --mount=type=cache,target=/src/node_modules \
   --mount=type=bind,from=docker,source=/usr/local/bin/docker,target=/usr/bin/docker \
   --mount=type=bind,from=buildx,source=/buildx,target=/usr/libexec/docker/cli-plugins/docker-buildx \
-  yarn run test --coverageDirectory=/tmp/coverage
+  --mount=type=secret,id=GITHUB_TOKEN \
+  GITHUB_TOKEN=$(cat /run/secrets/GITHUB_TOKEN) yarn run test --coverageDirectory=/tmp/coverage
 
 FROM scratch AS test-coverage
 COPY --from=test /tmp/coverage /

docker-bake.hcl

@@ -50,4 +50,5 @@ target "test" {
   dockerfile = "dev.Dockerfile"
   target = "test-coverage"
   output = ["./coverage"]
+  secret = ["id=GITHUB_TOKEN,env=GITHUB_TOKEN"]
 }

package.json

@@ -29,7 +29,7 @@
   "dependencies": {
     "@actions/core": "^1.10.0",
     "@actions/exec": "^1.1.1",
-    "@actions/http-client": "^2.0.1",
+    "@actions/github": "^5.1.1",
     "@actions/tool-cache": "^2.0.1",
     "csv-parse": "^5.3.3",
     "js-yaml": "^4.1.0",

src/buildx.ts

@@ -237,10 +237,12 @@ export async function build(inputBuildRef: string, dest: string, standalone: boo
   return setPlugin(toolPath, dest);
 }
 
-export async function install(inputVersion: string, dest: string, standalone: boolean): Promise<string> {
-  const release: github.GitHubRelease | null = await github.getRelease(inputVersion);
-  if (!release) {
-    throw new Error(`Cannot find buildx ${inputVersion} release`);
+export async function install(inputVersion: string, githubToken: string, dest: string, standalone: boolean): Promise<string> {
+  let release: github.Release;
+  if (inputVersion == 'latest') {
+    release = await github.getLatestRelease(githubToken);
+  } else {
+    release = await github.getReleaseTag(inputVersion, githubToken);
   }
   core.debug(`Release ${release.tag_name} found`);
   const version = release.tag_name.replace(/^v+|v+$/g, '');

src/context.ts

@@ -36,6 +36,7 @@ export interface Inputs {
   config: string;
   configInline: string;
   append: string;
+  githubToken: string;
 }
 
 export async function getInputs(): Promise<Inputs> {
@@ -51,7 +52,8 @@ export async function getInputs(): Promise<Inputs> {
     endpoint: core.getInput('endpoint'),
     config: core.getInput('config'),
     configInline: core.getInput('config-inline'),
-    append: core.getInput('append')
+    append: core.getInput('append'),
+    githubToken: core.getInput('github_token')
   };
 }
 

src/github.ts

@@ -1,12 +1,37 @@
-import * as httpm from '@actions/http-client';
+import * as github from '@actions/github';
 
-export interface GitHubRelease {
+export interface Release {
   id: number;
   tag_name: string;
 }
 
-export const getRelease = async (version: string): Promise<GitHubRelease | null> => {
-  const url = `https://github.com/docker/buildx/releases/${version}`;
-  const http: httpm.HttpClient = new httpm.HttpClient('setup-buildx');
-  return (await http.getJson<GitHubRelease>(url)).result;
+const [owner, repo] = 'docker/buildx'.split('/');
+
+export const getReleaseTag = async (tag: string, githubToken: string): Promise<Release> => {
+  return (
+    await github
+      .getOctokit(githubToken)
+      .rest.repos.getReleaseByTag({
+        owner,
+        repo,
+        tag
+      })
+      .catch(error => {
+        throw new Error(`Cannot get release ${tag}: ${error}`);
+      })
+  ).data as Release;
+};
+
+export const getLatestRelease = async (githubToken: string): Promise<Release> => {
+  return (
+    await github
+      .getOctokit(githubToken)
+      .rest.repos.getLatestRelease({
+        owner,
+        repo
+      })
+      .catch(error => {
+        throw new Error(`Cannot get latest release: ${error}`);
+      })
+  ).data as Release;
 };