Updates

src/common.ts

@@ -180,7 +180,7 @@ export const HARDEN_RUNNER_UNAVAILABLE_MESSAGE =
   "Sorry, we are currently experiencing issues with the Harden Runner installation process. It is currently unavailable.";
 
 export const ARC_RUNNER_MESSAGE =
-  "Workflow is currently being executed in ARC based runner";
+  "Workflow is currently being executed in ARC based runner.";
 
 export const ARM64_RUNNER_MESSAGE =
-  "Sorry, arm64 runners for public repos are not supported yet.";
+  "ARM runners are not supported in the Harden-Runner community tier.";

src/install-agent.ts

@@ -7,17 +7,17 @@ import { verifyChecksum } from "./checksum";
 import { EOL } from "os";
 import { ARM64_RUNNER_MESSAGE } from "./common";
 
-export async function installAgent(isTLS: boolean, configStr: string) {
+export async function installAgent(
+  isTLS: boolean,
+  configStr: string
+): Promise<boolean> {
   // Note: to avoid github rate limiting
-  let token = core.getInput("token");
-  let auth = `token ${token}`;
+  const token = core.getInput("token", { required: true });
+  const auth = `token ${token}`;
 
-  let downloadPath: string;
+  const variant = process.arch === "x64" ? "amd64" : "arm64";
 
-  let variant = "arm64";
-  if (process.arch === "x64") {
-    variant = "amd64";
-  }
+  let downloadPath: string;
 
   fs.appendFileSync(process.env.GITHUB_STATE, `isTLS=${isTLS}${EOL}`, {
     encoding: "utf8",
@@ -30,7 +30,7 @@ export async function installAgent(isTLS: boolean, configStr: string) {
   } else {
     if (variant === "arm64") {
       console.log(ARM64_RUNNER_MESSAGE);
-      process.exit(0);
+      return false;
     }
     downloadPath = await tc.downloadTool(
       "https://github.com/step-security/agent/releases/download/v0.13.7/agent_0.13.7_linux_amd64.tar.gz",
@@ -61,4 +61,5 @@ export async function installAgent(isTLS: boolean, configStr: string) {
   cp.execFileSync(cmd, args);
   cp.execSync("sudo systemctl daemon-reload");
   cp.execSync("sudo service agent start", { timeout: 15000 });
+  return true;
 }

src/setup.ts

@@ -229,30 +229,32 @@ interface MonitorResponse {
 
     let isTLS = await isTLSEnabled(context.repo.owner);
 
-    await installAgent(isTLS, confgStr);
+    const agentInstalled = await installAgent(isTLS, confgStr);
 
-    // Check that the file exists locally
-    var statusFile = "/home/agent/agent.status";
-    var logFile = "/home/agent/agent.log";
-    var counter = 0;
-    while (true) {
-      if (!fs.existsSync(statusFile)) {
-        counter++;
-        if (counter > 30) {
-          console.log("timed out");
-          if (fs.existsSync(logFile)) {
-            var content = fs.readFileSync(logFile, "utf-8");
-            console.log(content);
+    if (agentInstalled) {
+      // Check that the file exists locally
+      var statusFile = "/home/agent/agent.status";
+      var logFile = "/home/agent/agent.log";
+      var counter = 0;
+      while (true) {
+        if (!fs.existsSync(statusFile)) {
+          counter++;
+          if (counter > 30) {
+            console.log("timed out");
+            if (fs.existsSync(logFile)) {
+              var content = fs.readFileSync(logFile, "utf-8");
+              console.log(content);
+            }
+            break;
           }
+          await sleep(300);
+        } // The file *does* exist
+        else {
+          // Read the file
+          var content = fs.readFileSync(statusFile, "utf-8");
+          console.log(content);
           break;
         }
-        await sleep(300);
-      } // The file *does* exist
-      else {
-        // Read the file
-        var content = fs.readFileSync(statusFile, "utf-8");
-        console.log(content);
-        break;
       }
     }
   } catch (error) {