Get secret from GITHUB_EVENT_PATH to not leak

Author: Matyrobbrt

action-runner/action.yml

@@ -4,7 +4,9 @@ description: 'An action for publishing PRs'
 inputs:
   endpoint:
     description: Endpoint to login
-    required: true
+  endpoint-input:
+    description: If endpoint is not provided, it will be gotten from the input value with this name of the action
+    default: endpoint
 
 runs:
   using: node20

action-runner/dist/index.js

@@ -23,7 +23,12 @@ export async function run() {
   }
   workspace = path.resolve(githubWorkspacePath)
 
-  const endpoint = core.getInput("endpoint")
+  let endpoint = core.getInput("endpoint")
+  if (!endpoint) {
+    const json = JSON.parse(await fs.readFile(process.env['GITHUB_EVENT_PATH']!!, {encoding: 'utf8'}))
+    endpoint = json.inputs[core.getInput('endpoint-input')]
+  }
+
   core.setSecret(endpoint)
   await setupWs(endpoint, onMessage)
 }