Function readConfiguredTargetRepo

actions/setup/js/apply_samples.cjs:265–289

* Read the configured `target-repo` for a given safe-output tool from the * safe-outputs config file (GH_AW_SAFE_OUTPUTS_CONFIG_PATH). Returns an empty * string when no config is available or no target-repo is configured. * @param {string} tool * @returns {string}

(tool)

 * @returns {string}
 */
function readConfiguredTargetRepo(tool) {
  const configPath = process.env.GH_AW_SAFE_OUTPUTS_CONFIG_PATH;
  if (!configPath || !configPath.trim()) {
    return "";
  }

  const toolKey = typeof tool === "string" ? tool.replace(/-/g, "_") : "";

  try {
    const raw = fs.readFileSync(configPath, "utf8");
    const parsed = JSON.parse(raw);

    // Mirror safe_outputs_config.cjs behavior: normalize top-level keys by replacing '-' with '_'.
    const config = parsed && typeof parsed === "object" ? Object.fromEntries(Object.entries(parsed).map(([k, v]) => [String(k).replace(/-/g, "_"), v])) : {};

    const toolConfig = toolKey && config && typeof config === "object" ? config[toolKey] : null;
    const target = toolConfig && typeof toolConfig === "object" ? toolConfig["target-repo"] || toolConfig["target_repo"] : null;
    if (typeof target === "string") {
      return target.trim();
    }
  } catch (err) {
    core.debug(`apply_samples: could not read target-repo from ${configPath}: ${getErrorMessage(err)}`);
  }
  return "";
}

/**
 * Resolve the on-disk working directory in which a sample's patch should be