Merge pull request #20 from thc202/release-v0.3.1

Update dependency and release v0.3.1

Author: psiinon

CHANGELOG.md

@@ -4,7 +4,9 @@ All notable changes to this GitHub action will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
-## [Unreleased]
+## [0.3.1] - 2023-07-05
+### Fixed
+- Check issues with authenticated user. [#19](https://github.com/zaproxy/action-api-scan/issues/19)
 
 ## [0.3.0] - 2023-06-29
 
@@ -26,7 +28,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 First release to Marketplace.
 
-[Unreleased]: https://github.com/zaproxy/action-api-scan/compare/v0.3.0...HEAD
+[0.3.1]: https://github.com/zaproxy/action-api-scan/compare/v0.3.0...v0.3.1
 [0.3.0]: https://github.com/zaproxy/action-api-scan/compare/v0.2.0...v0.3.0
 [0.2.0]: https://github.com/zaproxy/action-api-scan/compare/v0.1.1...v0.2.0
 [0.1.1]: https://github.com/zaproxy/action-api-scan/compare/v0.1.0...v0.1.1

README.md

@@ -73,7 +73,7 @@ will be copied into the docker container:
 ```
 steps:
   - name: ZAP Scan
-    uses: zaproxy/action-api-scan@v0.3.0
+    uses: zaproxy/action-api-scan@v0.3.1
     with:
       target: 'https://www.zaproxy.org/'
 ```
@@ -94,7 +94,7 @@ jobs:
           ref: master
 
       - name: ZAP Scan
-        uses: zaproxy/action-api-scan@v0.3.0
+        uses: zaproxy/action-api-scan@v0.3.1
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           docker_name: 'owasp/zap2docker-stable'

dist/index.js

@@ -8081,11 +8081,17 @@ const actionCommon = {
             create_new_issue = true;
         }
         else {
+            let login = "github-actions[bot]";
+            try {
+                login = (await octokit.users.getAuthenticated()).data.login;
+            }
+            catch (e) {
+                console.log(`Using ${login} to serch for issues.`);
+            }
             // Sometimes search API returns recently closed issue as an open issue
             for (let i = 0; i < issues.data.items.length; i++) {
                 const issue = issues.data.items[i];
-                if (issue["state"] === "open" &&
-                    issue["user"]["login"] === "github-actions[bot]") {
+                if (issue["state"] === "open" && issue["user"]["login"] === login) {
                     openIssue = issue;
                     break;
                 }
@@ -8108,7 +8114,7 @@ const actionCommon = {
                     let lastBotComment;
                     const lastCommentIndex = comments["data"].length - 1;
                     for (let i = lastCommentIndex; i >= 0; i--) {
-                        if (comments["data"][i]["user"]["login"] === "github-actions[bot]") {
+                        if (comments["data"][i]["user"]["login"] === login) {
                             lastBotComment = comments["data"][i];
                             break;
                         }

package-lock.json

@@ -23,7 +23,7 @@
   "dependencies": {
     "@actions/core": "^1.10.0",
     "@actions/exec": "^1.1.1",
-    "@zaproxy/actions-common-scans": "^1.0.0",
+    "@zaproxy/actions-common-scans": "^1.0.2",
     "lodash": "^4.17.21"
   },
   "devDependencies": {