fetch all security alerts

Author: robrat

.env.example

@@ -1 +1,2 @@
 LOCAL_GITHUB_ACCESS_TOKEN=XXXX
+# INPUT_FETCH-DEPTH=0

action.yml

@@ -21,6 +21,10 @@ inputs:
     type: boolean
     description: 'If true, the action will not validate the user or the commit verification status'
     default: false
+  fetch-depth:
+    description: The number of vulnerability alerts to fetch, <= 0 for all
+    required: false
+    default: '0'
 outputs:
   dependency-names:
     description: 'A comma-separated list of all package names updated.'

src/dependabot/util.ts

@@ -1,4 +1,5 @@
 import type { Context } from './github-context'
+import { getInput } from '@actions/core'
 
 export function parseNwo (nwo: string): {owner: string; repo: string} {
   const [owner, name] = nwo.split('/')
@@ -29,3 +30,13 @@ export function getTitle (context: Context): string {
   const { pull_request: pr } = context.payload
   return pr?.title || ''
 }
+
+export function getNumberInput (inputName: string, defaultVal: number): number;
+export function getNumberInput (inputName: string, defaultVal?: number): number | undefined {
+  const inputStr = getInput(inputName)
+  let num = Number.parseInt(inputStr, 10)
+  if (Number.isNaN(num)) {
+    return defaultVal
+  }
+  return num
+}