index.ts — dead-code-hunter Source File

Source Code

import * as core from '@actions/core';
import * as exec from '@actions/exec';
import * as github from '@actions/github';
import * as fs from 'fs/promises';
import * as path from 'path';
import { randomUUID } from 'crypto';
import { Configuration, DefaultApi } from '@supermodeltools/sdk';
import type { DeadCodeAnalysisResponseAsync, DeadCodeAnalysisResponse } from '@supermodeltools/sdk';
import { filterByIgnorePatterns, filterByChangedFiles, formatPrComment } from './dead-code';

/** Fields that should be redacted from logs */
const SENSITIVE_KEYS = new Set([
  'authorization',
  'cookie',
  'set-cookie',
  'access_token',
  'refresh_token',
  'api_key',
  'apikey',
  'password',
  'secret',
  'token',
  'x-api-key',
]);

const MAX_VALUE_LENGTH = 1000;
const MAX_POLL_ATTEMPTS = 90;
const DEFAULT_RETRY_INTERVAL_MS = 10_000;
const POLL_TIMEOUT_MS = 15 * 60 * 1000;

/**
 * Safely serialize a value for logging, handling circular refs, BigInt, and large values.
 * Redacts sensitive fields.
 */
function safeSerialize(value: unknown, maxLength = MAX_VALUE_LENGTH): string {
  try {
    const seen = new WeakSet();

    const serialized = JSON.stringify(value, (key, val) => {
      if (key && SENSITIVE_KEYS.has(key.toLowerCase())) {
        return '[REDACTED]';
      }
      if (typeof val === 'bigint') {
        return val.toString();
      }
      if (typeof val === 'object' && val !== null) {
        if (seen.has(val)) {
          return '[Circular]';
        }
        seen.add(val);
      }
      return val;
    }, 2);

    if (serialized && serialized.length > maxLength) {
      return serialized.slice(0, maxLength) + '... [truncated]';
    }

    return serialized ?? '[undefined]';
  } catch {
// ... (310 more lines)