feat(actions): add working-directory

Signed-off-by: Emilien Escalle <emilien.escalle@escemi.com>

Author: neilime

README.md

@@ -36,7 +36,7 @@ Opinionated GitHub Actions and reusable workflows for foundational continuous-in
 
 - [Parse CI reports](actions/parse-ci-reports/README.md) - parses CI reports (tests, linting, coverage) into GitHub summaries and Markdown for PR comments.
 - [Repository owner is organization](actions/repository-owner-is-organization/README.md) - checks whether the repository owner is an organization.
-- [Working directory](actions/working-directory/README.md) - resolves and validates a working directory path as an absolute path.
+- [Working directory](actions/working-directory/README.md) - resolves and validates a working directory path, exposing absolute and workspace-relative outputs.
 - [Slugify](actions/slugify/README.md) - converts free-form strings into GitHub-friendly slugs.
 
 ## Reusable Workflows

actions/working-directory/README.md

@@ -42,9 +42,10 @@ Action to resolve and validate a working directory path.
 
 ## Inputs
 
-| **Input**               | **Description**                                         | **Required** | **Default** |
-| ----------------------- | ------------------------------------------------------- | ------------ | ----------- |
-| **`working-directory`** | Relative or absolute working directory path to resolve. | **false**    | `.`         |
+| **Input**                       | **Description**                                                       | **Required** | **Default** |
+| ------------------------------- | --------------------------------------------------------------------- | ------------ | ----------- |
+| **`working-directory`**         | Relative or absolute working directory path to resolve.               | **false**    | `.`         |
+| **`enforce-path-in-workspace`** | Whether to fail when the resolved path is outside `GITHUB_WORKSPACE`. | **false**    | `true`      |
 
 <!-- inputs:end -->
 <!-- secrets:start -->
@@ -53,9 +54,10 @@ Action to resolve and validate a working directory path.
 
 ## Outputs
 
-| **Output**              | **Description**                               |
-| ----------------------- | --------------------------------------------- |
-| **`working-directory`** | The resolved absolute working directory path. |
+| **Output**                    | **Description**                                                     |
+| ----------------------------- | ------------------------------------------------------------------- |
+| **`absolute-path`**           | The resolved absolute working directory path.                       |
+| **`workspace-relative-path`** | The resolved working directory path relative to `GITHUB_WORKSPACE`. |
 
 <!-- outputs:end -->
 <!-- examples:start -->

actions/working-directory/action.yml

@@ -10,11 +10,18 @@ inputs:
     description: "Relative or absolute working directory path to resolve."
     required: false
     default: "."
+  enforce-path-in-workspace:
+    description: "Whether to fail when the resolved path is outside GITHUB_WORKSPACE."
+    required: false
+    default: "true"
 
 outputs:
-  working-directory:
+  absolute-path:
     description: "The resolved absolute working directory path."
-    value: ${{ steps.working-directory.outputs.working-directory }}
+    value: ${{ steps.working-directory.outputs.absolute-path }}
+  workspace-relative-path:
+    description: "The resolved working directory path relative to GITHUB_WORKSPACE."
+    value: ${{ steps.working-directory.outputs.workspace-relative-path }}
 
 runs:
   using: "composite"
@@ -23,22 +30,36 @@ runs:
       uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
       env:
         WORKING_DIRECTORY_INPUT: ${{ inputs.working-directory }}
+        ENFORCE_PATH_IN_WORKSPACE_INPUT: ${{ inputs.enforce-path-in-workspace }}
       with:
         script: |
           const fs = require('node:fs');
           const path = require('node:path');
+          const workspaceRoot = process.env.GITHUB_WORKSPACE || process.cwd();
+          const enforcePathInWorkspace = (process.env.ENFORCE_PATH_IN_WORKSPACE_INPUT || 'true') !== 'false';
 
-          let workingDirectory = process.env.WORKING_DIRECTORY_INPUT || '.';
+          const workingDirectory = process.env.WORKING_DIRECTORY_INPUT || '.';
 
           if (!path.isAbsolute(workingDirectory)) {
-            workingDirectory = path.join(process.env.GITHUB_WORKSPACE, workingDirectory);
+            workingDirectory = path.join(workspaceRoot, workingDirectory);
           }
 
           if (!fs.existsSync(workingDirectory)) {
             core.setFailed(`The specified working directory does not exist: ${workingDirectory}`);
             return;
           }
 
-          workingDirectory = path.resolve(workingDirectory);
-          core.debug(`Running in working directory: ${workingDirectory}`);
-          core.setOutput('working-directory', workingDirectory);
+          const absolutePath = path.resolve(workingDirectory);
+          const workspaceRelativePath = path.relative(workspaceRoot, absolutePath) || '.';
+
+          if (enforcePathInWorkspace) {
+            const isOutsideWorkspace = workspaceRelativePath.startsWith('..') || path.isAbsolute(workspaceRelativePath);
+
+            if (isOutsideWorkspace) {
+              core.setFailed(`The specified working directory is outside GITHUB_WORKSPACE: ${absolutePath}`);
+              return;
+            }
+          }
+
+          core.setOutput('absolute-path', absolutePath);
+          core.setOutput('workspace-relative-path', workspaceRelativePath);