Method buildCustomActionStep

pkg/workflow/safe_outputs_steps.go:18–65

======================================== Safe Output Step Builders ======================================== buildCustomActionStep creates a step that uses a custom action reference instead of inline JavaScript via actions/github-script

(data *WorkflowData, config GitHubScriptStepConfig, scriptName string)

// buildCustomActionStep creates a step that uses a custom action reference
// instead of inline JavaScript via actions/github-script
func (c *Compiler) buildCustomActionStep(data *WorkflowData, config GitHubScriptStepConfig, scriptName string) []string {
	safeOutputsStepsLog.Printf("Building custom action step: %s (scriptName=%s, actionMode=%s)", config.StepName, scriptName, c.actionMode)

	var steps []string

	// Get the action path from the script registry
	actionPath := DefaultScriptRegistry.GetActionPath(scriptName)
	if actionPath == "" {
		safeOutputsStepsLog.Printf("WARNING: No action path found for script %s, falling back to inline mode", scriptName)
		// Set ScriptFile for inline mode fallback
		config.ScriptFile = scriptName + ".cjs"
		return c.buildGitHubScriptStep(data, config)
	}

	// Resolve the action reference based on mode
	actionRef := c.resolveActionReference(actionPath, data)
	if actionRef == "" {
		safeOutputsStepsLog.Printf("WARNING: Could not resolve action reference for %s, falling back to inline mode", actionPath)
		// Set ScriptFile for inline mode fallback
		config.ScriptFile = scriptName + ".cjs"
		return c.buildGitHubScriptStep(data, config)
	}

	// Add artifact download steps before the custom action step.
	// In workflow_call context, use the per-invocation prefix to avoid artifact name clashes.
	// These steps are used in jobs that depend on the agent job (not activation), so use
	// the agent-downstream prefix expression.
	steps = append(steps, buildAgentOutputDownloadSteps(artifactPrefixExprForAgentDownstreamJob(data), c.getActionPin)...)

	// Step name and metadata
	steps = append(steps, fmt.Sprintf("      - name: %s\n", config.StepName))
	steps = append(steps, fmt.Sprintf("        id: %s\n", config.StepID))
	steps = append(steps, fmt.Sprintf("        uses: %s\n", actionRef))

	// Environment variables section
	steps = append(steps, "        env:\n")
	steps = append(steps, "          GH_AW_AGENT_OUTPUT: ${{ steps.setup-agent-output-env.outputs.GH_AW_AGENT_OUTPUT }}\n")
	steps = append(steps, config.CustomEnvVars...)
	c.addCustomSafeOutputEnvVars(&steps, data)

	// With section for inputs (replaces github-token in actions/github-script)
	steps = append(steps, "        with:\n")

	// Map github-token to token input for custom actions
	c.addCustomActionGitHubToken(&steps, data, config)

	return steps
}

// addCustomActionGitHubToken adds a GitHub token as action input.
// The token precedence depends on the tokenType flags: