Bump dive image version to 0.12, fix --ci-config and other issues

.editorconfig

@@ -0,0 +1,12 @@
+root = true
+
+[*]
+indent_style = space
+indent_size = 2
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[*.md]
+trim_trailing_whitespace = false
+indent_size = 4

.eslintrc.json

@@ -55,4 +55,4 @@
         "es6": true,
         "jest/globals": true
     }
-}
+}

.github/codeql/config.yml

@@ -1,2 +1,2 @@
-paths: 
-  - src 
+paths:
+  - src

.github/renovate.json5

@@ -0,0 +1,4 @@
+{
+  $schema: 'https://docs.renovatebot.com/renovate-schema.json',
+  extends: ['local>SpotOnInc/renovate-config']
+}

.github/workflows/automerge.yml

@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: automerge
-        uses: "pascalgn/automerge-action@v0.12.0"
+        uses: "pascalgn/automerge-action@v0.16.3"
         env:
           GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
           MERGE_LABELS: "dependencies"

.github/workflows/codeql-analysis.yml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       with:
         # We must fetch at least the immediate parents so that if this is
         # a pull request then we can checkout the head.
@@ -43,19 +43,19 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
-        # By default, queries listed here will override any specified in a config file. 
+        # By default, queries listed here will override any specified in a config file.
         # Prefix the list here with "+" to use these queries and those in the config file.
         # queries: ./path/to/local/query, your-org/your-repo/queries@main
         config-file: ./.github/codeql/config.yml
 
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
+      uses: github/codeql-action/autobuild@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -69,4 +69,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10

.github/workflows/test.yml

@@ -9,11 +9,11 @@ jobs:
   build: # make sure build/ci work properly
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - run: npm install
       - run: npm run all
   test: # make sure the action works on a clean machine without building
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - uses: ./

.pre-commit-config.yaml

@@ -0,0 +1,37 @@
+repos:
+- repo: https://github.com/pre-commit/pre-commit-hooks
+  rev: v4.6.0
+  hooks:
+    # Git style
+    - id: check-added-large-files
+    - id: check-merge-conflict
+    - id: check-vcs-permalinks
+    - id: forbid-new-submodules
+    - id: no-commit-to-branch
+
+    # Common errors
+    - id: end-of-file-fixer
+    - id: trailing-whitespace
+      args: [--markdown-linebreak-ext=md]
+    - id: check-yaml
+    - id: check-merge-conflict
+    - id: check-executables-have-shebangs
+
+    # Cross platform
+    - id: check-case-conflict
+    - id: mixed-line-ending
+      args: [--fix=lf]
+
+    # Security
+    - id: detect-aws-credentials
+      args: ['--allow-missing-credentials']
+    - id: detect-private-key
+
+
+# JSON5 Linter
+- repo: https://github.com/pre-commit/mirrors-prettier
+  rev: v3.1.0
+  hooks:
+  - id: prettier
+    # https://prettier.io/docs/en/options.html#parser
+    files: '.json5$'

.prettierignore

@@ -1,3 +1,3 @@
 dist/
 lib/
-node_modules/
+node_modules/

.prettierrc.json

@@ -7,4 +7,4 @@
     "trailingComma": "none",
     "bracketSpacing": false,
     "arrowParens": "avoid"
-}
+}

LICENSE

@@ -1,5 +1,6 @@
 MIT License
 
+Copyright (c) 2022-2024 Maksym Vlasov
 Copyright (c) 2020 Yuichi Tanaka
 
 Permission is hereby granted, free of charge, to any person obtaining a copy

README.md

@@ -24,19 +24,19 @@ dive action is an action that allows developers who develop Docker image to run
 ```yaml
 name: "Dive CI"
 
-on: [push]
+on: [pull_request]
 
 jobs:
   dive:
     runs-on: ubuntu-latest
     name: Analyze image efficiency
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Build image
         run: docker build -t sample:latest .
       - name: Dive
-        uses: yuichielectric/dive-action@0.0.4
+        uses: MaxymVlasov/dive-action@1.0.0
         with:
           image: "sample:latest"
           config-file: ${{ github.workspace }}/.dive-ci.yml
@@ -131,9 +131,9 @@ Result:FAIL [Total:3] [Passed:2] [Failed:1] [Warn:0] [Skipped:0]
 ##[error]Process completed with exit code 1.
 ```
 
-[release]: https://github.com/yuichielectric/dive-action/releases/latest
-[release-badge]: https://img.shields.io/github/release/yuichielectric/dive-action.svg?logo=github&color=green
+[release]: https://github.com/maxymvlasov/dive-action/releases/latest
+[release-badge]: https://img.shields.io/github/release/maxymvlasov/dive-action.svg?logo=github&color=green
 [marketplace]: https://github.com/marketplace/actions/dive-action
 [marketplace-badge]: https://img.shields.io/badge/marketplace-dive--action-green?logo=github
-[license]: https://github.com/yuichielectric/dive-action/blob/master/LICENSE
-[license-badge]: https://img.shields.io/github/license/yuichielectric/dive-action.svg
+[license]: https://github.com/maxymvlasov/dive-action/blob/master/LICENSE
+[license-badge]: https://img.shields.io/github/license/maxymvlasov/dive-action.svg

action.yml

@@ -1,6 +1,6 @@
-name: "Dive Action"
+name: "Dive Action v2"
 description: "Run Dive to analyze the container image efficiency"
-author: "@yuichielectric"
+author: "@MaxymVlasov"
 branding:
   icon: "aperture"
   color: "green"
@@ -16,5 +16,5 @@ inputs:
     description: "GitHub Token to post PR comment"
     required: true
 runs:
-  using: "node12"
+  using: "node20"
   main: "dist/index.js"

dist/sourcemap-register.js

@@ -2386,7 +2386,7 @@ IndexedSourceMapConsumer.prototype.sourceContentFor =
  * and an object is returned with the following properties:
  *
  *   - line: The line number in the generated source, or null.  The
- *     line number is 1-based. 
+ *     line number is 1-based.
  *   - column: The column number in the generated source, or null.
  *     The column number is 0-based.
  */
@@ -3871,7 +3871,7 @@ module.exports = require("path");
 /************************************************************************/
 /******/ 	// The module cache
 /******/ 	var __webpack_module_cache__ = {};
-/******/ 	
+/******/
 /******/ 	// The require function
 /******/ 	function __webpack_require__(moduleId) {
 /******/ 		// Check if module is in cache
@@ -3884,7 +3884,7 @@ module.exports = require("path");
 /******/ 			// no module.loaded needed
 /******/ 			exports: {}
 /******/ 		};
-/******/ 	
+/******/
 /******/ 		// Execute the module function
 /******/ 		var threw = true;
 /******/ 		try {
@@ -3893,18 +3893,18 @@ module.exports = require("path");
 /******/ 		} finally {
 /******/ 			if(threw) delete __webpack_module_cache__[moduleId];
 /******/ 		}
-/******/ 	
+/******/
 /******/ 		// Return the exports of the module
 /******/ 		return module.exports;
 /******/ 	}
-/******/ 	
+/******/
 /************************************************************************/
 /******/ 	/* webpack/runtime/compat */
-/******/ 	
+/******/
 /******/ 	__webpack_require__.ab = __dirname + "/";/************************************************************************/
 /******/ 	// module exports must be returned from runtime so entry inlining is disabled
 /******/ 	// startup
 /******/ 	// Load entry module and return exports
 /******/ 	return __webpack_require__(645);
 /******/ })()
-;
+;

src/main.ts

@@ -33,7 +33,7 @@ function format(output: string): string {
         ret.push('| Count | Wasted Space | File Paht |')
         ret.push('|---|---|---|')
       } else {
-        // https://github.com/wagoodman/dive/blob/master/runtime/ci/evaluator.go#L140
+        // https://github.com/wagoodman/dive/blob/v0.12.0/runtime/ci/evaluator.go#L138
         ret.push(
           `| ${line.slice(0, 5)} | ${line.slice(7, 19)} | ${line.slice(21)} |`
         )
@@ -48,14 +48,14 @@ async function run(): Promise<void> {
     const image = core.getInput('image')
     const configFile = core.getInput('config-file')
 
-    const diveImage = 'wagoodman/dive:v0.9'
+    const diveImage = 'wagoodman/dive:v0.12'
     await exec.exec('docker', ['pull', diveImage])
 
     const commandOptions = [
       '-e',
       'CI=true',
       '-e',
-      'DOCKER_API_VERSION=1.37',
+      'DOCKER_API_VERSION=1.45',
       '--rm',
       '-v',
       '/var/run/docker.sock:/var/run/docker.sock'
@@ -65,12 +65,16 @@ async function run(): Promise<void> {
       commandOptions.push(
         '--mount',
         `type=bind,source=${configFile},target=/.dive-ci`,
-        '--ci-config',
-        '/.dive-ci'
       )
     }
 
     const parameters = ['run', ...commandOptions, diveImage, image]
+    if (fs.existsSync(configFile)) {
+      parameters.push(
+        '--ci-config',
+        '/.dive-ci'
+      )
+    }
     let output = ''
     const execOptions = {
       ignoreReturnCode: true,