use GitHub context to branch processing (#22)

src/main.ts

@@ -1,37 +1,50 @@
 import * as core from '@actions/core'
 import * as github from '@actions/github'
-import stripAnsi from 'strip-ansi'
 import Octokit, {IssuesCreateResponse} from '@octokit/rest'
 import {Audit} from './audit'
-import * as issue from './issue'
 import {IssueOption} from './interface'
+import * as issue from './issue'
+import * as pr from './pr'
 
-async function run(): Promise<void> {
+export async function run(): Promise<void> {
   try {
+    // run `npm audit`
     const audit = new Audit()
     audit.run()
-
     core.info(audit.stdout)
 
-    if (!audit.foundVulnerability()) {
-      // vulnerabilities are not found
-      return
+    if (audit.foundVulnerability()) {
+      // vulnerabilities are found
+
+      // get GitHub information
+      const ctx = JSON.parse(core.getInput('github_context'))
+      const token: string = core.getInput('github_token', {required: true})
+      const client: Octokit = new github.GitHub(token)
+
+      if (ctx.event_name === 'pull_request') {
+        await pr.createComment(
+          token,
+          github.context.repo.owner,
+          github.context.repo.repo,
+          ctx.event.number,
+          audit.strippedStdout()
+        )
+        core.setFailed('This repo has some vulnerabilities')
+        return
+      } else {
+        core.debug('open an issue')
+        // remove control characters and create a code block
+        const issueBody = audit.strippedStdout()
+        const option: IssueOption = issue.getIssueOption(issueBody)
+        const {
+          data: createdIssue
+        }: Octokit.Response<IssuesCreateResponse> = await client.issues.create({
+          ...github.context.repo,
+          ...option
+        })
+        core.debug(`#${createdIssue.number}`)
+      }
     }
-
-    core.debug('open an issue')
-    const token: string = core.getInput('token', {required: true})
-    const client: Octokit = new github.GitHub(token)
-
-    // remove control characters and create a code block
-    const issueBody = `\`\`\`\n${stripAnsi(audit.stdout)}\n\`\`\``
-    const option: IssueOption = issue.getIssueOption(issueBody)
-    const {
-      data: createdIssue
-    }: Octokit.Response<IssuesCreateResponse> = await client.issues.create({
-      ...github.context.repo,
-      ...option
-    })
-    core.debug(`#${createdIssue.number}`)
   } catch (error) {
     core.setFailed(error.message)
   }