Feat add input repository ids 2

README.md

@@ -43,6 +43,13 @@ jobs:
           # repositories: >-
           #   ["actions/toolkit", "github/docs"]
 
+          # Optional.
+          # List of repository IDs that the token should have access to
+          # https://docs.github.com/en/rest/apps/apps?apiVersion=2022-11-28#create-an-installation-access-token-for-an-app
+          # https://docs.github.com/en/actions/learn-github-actions/contexts#github-context
+          # repository_ids: >-
+          #   [${{github.repository_id}}]
+
           # Optional.
           # revoke: false
 

action.yml

@@ -41,6 +41,11 @@ inputs:
       The JSON-stringified array of the full names of the repositories the token should have access to.
       Defaults to all repositories that the installation can access.
       See https://docs.github.com/en/rest/apps/apps?apiVersion=2022-11-28#create-an-installation-access-token-for-an-app's `repositories`.
+  repository_ids:
+    description: >-
+      The JSON-stringified array of the ids of the repositories the token should have access to.
+      Defaults to all repositories that the installation can access.
+      See https://docs.github.com/en/rest/apps/apps?apiVersion=2022-11-28#create-an-installation-access-token-for-an-app's `repository_ids`.
   revoke:
     description: Revoke the token at the end of the job.
     default: true

src/create-installation-access-token.ts

@@ -14,6 +14,7 @@ export type InstallationAccessTokenCreationOptions = Readonly<{
   permissions?: Record<string, string>;
   privateKey: string;
   repositories?: string[];
+  repositoryIDs?: number[];
 }>;
 
 export const createInstallationAccessToken = async ({
@@ -23,6 +24,7 @@ export const createInstallationAccessToken = async ({
   permissions,
   privateKey,
   repositories,
+  repositoryIDs,
 }: InstallationAccessTokenCreationOptions): Promise<string> => {
   try {
     const app = createAppAuth({
@@ -48,7 +50,12 @@ export const createInstallationAccessToken = async ({
       data: { token },
     } = await octokit.request(
       "POST /app/installations/{installation_id}/access_tokens",
-      { installation_id: installationId, permissions, repositories },
+      {
+        installation_id: installationId,
+        permissions,
+        repositories,
+        repository_ids: repositoryIDs,
+      },
     );
     return token;
   } catch (error: unknown) {

src/parse-options.ts

@@ -46,12 +46,19 @@ export const parseOptions = (): InstallationAccessTokenCreationOptions => {
     : undefined;
   debug(`Requested repositories: ${JSON.stringify(repositories)}.`);
 
+  const repositoryIDsInput = getInput("repository_ids");
+  const repositoryIDs = repositoryIDsInput
+    ? (JSON.parse(repositoryIDsInput) as number[])
+    : undefined;
+  debug(`Requested repository_ids: ${JSON.stringify(repositoryIDs)}.`);
+
   return {
     appId,
     githubApiUrl,
     installationRetrievalDetails,
     permissions,
     privateKey,
     repositories,
+    repositoryIDs,
   };
 };