fix: workaround windows install script (#477)

Because of a small bug the version of curl presently on GitHub windows runners, Syft's install.sh file can fail to execute. Therefore, at least for now, fall back to just using cache.downloadTool to get Syft. Signed-off-by: Will Murphy <will.murphy@anchore.com>
anchore · Jul 9, 2024 · 95b086a · 95b086a
1 parent 72370e1
commit 95b086a
Show file tree

Hide file tree

Showing 4 changed files with 64 additions and 4 deletions.
diff --git a/dist/attachReleaseAssets/index.js b/dist/attachReleaseAssets/index.js
diff --git a/dist/downloadSyft/index.js b/dist/downloadSyft/index.js
diff --git a/dist/runSyftAction/index.js b/dist/runSyftAction/index.js
diff --git a/src/github/SyftGithubAction.ts b/src/github/SyftGithubAction.ts
@@ -197,12 +197,28 @@ async function executeSyft({
   }
 }
 
+function isWindows(): boolean {
+  return process.platform == "win32";
+}
+
+async function downloadSyftWindowsWorkaround(version: string): Promise<string> {
+  const versionNoV = version.replace(/^v/, "");
+  const url = `https://github.com/anchore/syft/releases/download/${version}/syft_${versionNoV}_windows_amd64.zip`;
+  core.info(`Downloading syft from ${url}`);
+  const zipPath = await cache.downloadTool(url);
+  const toolDir = await cache.extractZip(zipPath);
+  return path.join(toolDir, `${SYFT_BINARY_NAME}${exeSuffix}`);
+}
+
 /**
  * Downloads the appropriate Syft binary for the platform
  */
 export async function downloadSyft(): Promise<string> {
   const name = SYFT_BINARY_NAME;
   const version = SYFT_VERSION;
+  if (isWindows()) {
+    return downloadSyftWindowsWorkaround(version);
+  }
 
   const url = `https://raw.githubusercontent.com/anchore/${name}/main/install.sh`;
 
@@ -211,7 +227,6 @@ export async function downloadSyft(): Promise<string> {
   // Download the installer, and run
   const installPath = await cache.downloadTool(url);
 
-  // Make sure the tool's executable bit is set
   const syftBinaryPath = `${installPath}_${name}`;
 
   await execute("sh", [installPath, "-d", "-b", syftBinaryPath, version]);