Add an input for passing additional arguments to cargo audit call

action.yml

@@ -8,6 +8,9 @@ inputs:
   token:
     description: GitHub Actions token
     required: true
+  args:
+    description: Arguments for the audit command
+    required: false
 
 runs:
   using: 'node12'

package.json

@@ -38,7 +38,8 @@
         "@actions/core": "^1.2.4",
         "@actions/github": "^2.1.1",
         "npm-check-updates": "^4.1.2",
-        "nunjucks": "^3.2.1"
+        "nunjucks": "^3.2.1",
+        "string-argv": "^0.3.1"
     },
     "devDependencies": {
         "@typescript-eslint/eslint-plugin": "^2.31.0",

src/input.ts

@@ -4,13 +4,17 @@
 
 import { input } from '@actions-rs/core';
 
+import stringArgv from 'string-argv';
+
 // Parsed action input
 export interface Input {
     token: string;
+    args: string[];
 }
 
 export function get(): Input {
     return {
         token: input.getInput('token', { required: true }),
+        args: stringArgv(input.getInput('args')),
     };
 }

src/main.ts

@@ -14,7 +14,7 @@ const pkg = require('../package.json'); // eslint-disable-line @typescript-eslin
 
 const USER_AGENT = `${pkg.name}/${pkg.version} (${pkg.bugs.url})`;
 
-async function getData(): Promise<interfaces.Report> {
+async function getData(args: string[]): Promise<interfaces.Report> {
     const cargo = await Cargo.get();
     await cargo.findOrInstall('cargo-audit');
 
@@ -23,7 +23,8 @@ async function getData(): Promise<interfaces.Report> {
     let stdout = '';
     try {
         core.startGroup('Calling cargo-audit (JSON output)');
-        await cargo.call(['audit', '--json'], {
+        const fullArgs = ['audit', '--json'].concat(args);
+        await cargo.call(fullArgs, {
             ignoreReturnCode: true,
             listeners: {
                 stdout: (buffer) => {
@@ -44,7 +45,7 @@ async function getData(): Promise<interfaces.Report> {
 }
 
 export async function run(actionInput: input.Input): Promise<void> {
-    const report = await getData();
+    const report = await getData(actionInput.args);
     let shouldReport = false;
     if (!report.vulnerabilities.found) {
         core.info('No vulnerabilities were found');