Merge pull request #205 from actions/users/tihuang/untrustedinputs

Not print untrusted info to STDOUT.

README.md

@@ -18,6 +18,31 @@ Run the tests :heavy_check_mark:
 ```bash
 $ npm test
 ```
+### Arguments
+
+| Input  | Description | Usage |
+| :---:     |     :---:   |    :---:   |
+| `repo-token`  | PAT(Personal Access Token) for authorizing repository. | *Required* |
+| `days-before-stale`  | Idle number of days before marking an issue/pr as stale. *Defaults to **60*** | Optional
+| `days-before-close`  | Idle number of days before closing an stale issue/pr. *Defaults to **7*** | Optional
+| `stale-issue-message`  | Message to post on the stale issue. | Optional
+| `stale-pr-message`  | Message to post on the stale pr. | Optional
+| `close-issue-message` | Message to post on the stale issue while closing it. | Optional
+| `close-pr-message`  | Message to post on the stale pr while closing it. | Optional
+| `stale-issue-label`  | Label to apply on the stale issue. *Defaults to **stale*** | Optional
+| `close-issue-label` | Label to apply on closing issue. | Optional
+| `stale-pr-label` | Label to apply on the stale pr. | Optional
+| `close-pr-label` | Label to apply on the closing pr. | Optional
+| `exempt-issue-labels` | Labels on an issue exempted from being marked as stale. | Optional
+| `exempt-pr-labels` | Labels on the pr exempted from being marked as stale. | Optional
+| `only-labels` | Only labels checked for stale issue/pr. | Optional
+| `operations-per-run` | Maximum number of operations per run. *Defaults to **30*** | Optional
+| `remove-stale-when-updated` | Remove stale label from issue/pr on updates or comments. *Defaults to **true*** | Optional
+| `debug-only` | Dry-run on action. *Defaults to **false*** | Optional
+| `ascending` | Order to get issues/pr. *Defaults to **false*** | Optional
+| `skip-stale-issue-message` | Skip adding stale message on stale issue. *Defaults to **false*** | Optional
+| `skip-stale-pr-message` | Skip adding stale message on stale pr. *Defaults to **false*** | Optional
+
 
 ### Usage
 
@@ -28,7 +53,7 @@ Basic:
 name: "Close stale issues"
 on:
   schedule:
-  - cron: "0 0 * * *"
+  - cron: "30 1 * * *"
 
 jobs:
   stale:
@@ -46,7 +71,7 @@ Configure stale timeouts:
 name: "Close stale issues"
 on:
   schedule:
-  - cron: "0 0 * * *"
+  - cron: "30 1 * * *"
 
 jobs:
   stale:
@@ -65,7 +90,7 @@ Configure labels:
 name: "Close stale issues"
 on:
   schedule:
-  - cron: "0 0 * * *"
+  - cron: "30 1 * * *"
 
 jobs:
   stale:

package-lock.json

@@ -5,9 +5,9 @@
   "requires": true,
   "dependencies": {
     "@actions/core": {
-      "version": "1.2.5",
-      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.2.5.tgz",
-      "integrity": "sha512-mwpoNjHSWWh0IiALdDEQi3tru124JKn0yVNziIBzTME8QRv7thwoghVuT1jBRjFvdtoHsqD58IRHy1nf86paRg=="
+      "version": "1.2.6",
+      "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.2.6.tgz",
+      "integrity": "sha512-ZQYitnqiyBc3D+k7LsgSBmMDVkOVidaagDG7j3fOym77jNunWRuYx7VSHa9GNfFZh+zh61xsCjRj4JxMZlDqTA=="
     },
     "@actions/github": {
       "version": "4.0.0",

package.json

@@ -25,7 +25,7 @@
   "author": "GitHub",
   "license": "MIT",
   "dependencies": {
-    "@actions/core": "^1.2.5",
+    "@actions/core": "^1.2.6",
     "@actions/github": "^4.0.0",
     "@octokit/rest": "^18.0.4",
     "semver": "^7.3.2"

src/IssueProcessor.ts

@@ -115,7 +115,7 @@ export class IssueProcessor {
       const isPr = !!issue.pull_request;
 
       core.info(
-        `Found issue: issue #${issue.number} - ${issue.title} last updated ${issue.updated_at} (is pr? ${isPr})`
+        `Found issue: issue #${issue.number} last updated ${issue.updated_at} (is pr? ${isPr})`
       );
 
       // calculate string based messages for this issue
@@ -277,7 +277,7 @@ export class IssueProcessor {
     );
 
     core.info(
-      `Comments not made by ${context.actor} or another bot: ${filteredComments.length}`
+      `Comments not made by actor or another bot: ${filteredComments.length}`
     );
 
     // if there are any user comments returned
@@ -336,7 +336,7 @@ export class IssueProcessor {
     staleLabel: string,
     skipMessage: boolean
   ): Promise<void> {
-    core.info(`Marking issue #${issue.number} - ${issue.title} as stale`);
+    core.info(`Marking issue #${issue.number} as stale`);
 
     this.staleIssues.push(issue);
 
@@ -382,9 +382,7 @@ export class IssueProcessor {
     closeMessage?: string,
     closeLabel?: string
   ): Promise<void> {
-    core.info(
-      `Closing issue #${issue.number} - ${issue.title} for being stale`
-    );
+    core.info(`Closing issue #${issue.number} for being stale`);
 
     this.closedIssues.push(issue);
 
@@ -434,9 +432,7 @@ export class IssueProcessor {
 
   // Remove a label from an issue
   private async removeLabel(issue: Issue, label: string): Promise<void> {
-    core.info(
-      `Removing label ${label} from issue #${issue.number} - ${issue.title}`
-    );
+    core.info(`Removing label from issue #${issue.number}`);
 
     this.removedLabelIssues.push(issue);
 
@@ -464,7 +460,7 @@ export class IssueProcessor {
     issue: Issue,
     label: string
   ): Promise<string | undefined> {
-    core.info(`Checking for label ${label} on issue #${issue.number}`);
+    core.info(`Checking for label on issue #${issue.number}`);
 
     this.operationsLeft -= 1;