Merge pull request #17 from step-security/fix/context

fix: subscription check code github context access fixed

Author: amanstep

Dockerfile

@@ -1,5 +1,5 @@
 FROM node:25-alpine3.23@sha256:636c5bc8fa6a7a542bc99f25367777b0b3dd0db7d1ca3959d14137a1ac80bde2
-RUN apk add --no-cache bash>5.0.16-r0 git>2.26.0-r0 curl
+RUN apk add --no-cache bash>5.0.16-r0 git>2.26.0-r0 curl jq
 COPY entrypoint.sh /entrypoint.sh
 RUN chmod +x /entrypoint.sh
 ENTRYPOINT ["/entrypoint.sh"]

action.yml

@@ -55,5 +55,3 @@ runs:
     - ${{ inputs.base-branch }}
     - ${{ inputs.file-extension }}
     - ${{ inputs.file-path }}
-  env:
-    REPO_PRIVATE: ${{ github.event.repository.private }}

entrypoint.sh

@@ -7,6 +7,9 @@ UPSTREAM="gaurav-nelson/github-action-markdown-link-check"
 ACTION_REPO="${GITHUB_ACTION_REPOSITORY:-}"
 DOCS_URL="https://docs.stepsecurity.io/actions/stepsecurity-maintained-actions"
 
+# determine repo visibility from the GitHub event payload
+REPO_PRIVATE=$(jq -r '.repository.private | tostring' "$GITHUB_EVENT_PATH" 2>/dev/null || echo "")
+
 echo ""
 echo -e "\033[1;36mStepSecurity Maintained Action\033[0m"
 echo "Secure drop-in replacement for $UPSTREAM"