fix: replace libsodium-wrappers with tweetsodium

Author: bubkoo

dist/index.js.cache

@@ -7,9 +7,6 @@
     "dist",
     "action.yml"
   ],
-  "overrides": {
-    "libsodium": "0.7.10"
-  },
   "scripts": {
     "clean": "rimraf dist",
     "lint": "eslint 'src/**/*.{js,ts}?(x)' --fix",
@@ -38,14 +35,13 @@
     "@octokit/auth-app": "^4.0.13",
     "@octokit/core": "^4.2.4",
     "is-base64": "^1.1.0",
-    "libsodium-wrappers": "^0.7.10"
+    "tweetsodium": "^0.0.6"
   },
   "devDependencies": {
     "@bubkoo/commitlint-config": "^1.2.2",
     "@bubkoo/eslint-config": "^1.5.1",
     "@bubkoo/tsconfig": "^1.2.4",
     "@types/is-base64": "^1.1.3",
-    "@types/libsodium-wrappers": "^0.7.10",
     "@types/node": "^18.19.130",
     "@vercel/ncc": "^0.34.0",
     "eslint": "^8.57.1",

dist/index.js.cache.js

@@ -0,0 +1,7 @@
+declare module 'tweetsodium' {
+  const sodium: {
+    seal(message: Uint8Array, key: Uint8Array): Uint8Array
+  }
+
+  export default sodium
+}

package-lock.json

@@ -1,7 +1,7 @@
 import * as core from '@actions/core'
 import * as github from '@actions/github'
 import isBase64 from 'is-base64'
-import sodium from 'libsodium-wrappers'
+import sodium from 'tweetsodium'
 import { Octokit } from '@octokit/core'
 import { createAppAuth } from '@octokit/auth-app'
 
@@ -59,22 +59,13 @@ async function makeSecret(octokit: Octokit, value: string) {
 
   const { key } = res.data
 
-  await sodium.ready
-
-  // Convert Secret & Base64 key to Uint8Array.
-  const binkey = sodium.from_base64(key, sodium.base64_variants.ORIGINAL)
-  const binsec = sodium.from_string(value)
-
-  // Encrypt the secret using LibSodium
-  const encryptedBytes = sodium.crypto_box_seal(binsec, binkey)
+  const keyBytes = Buffer.from(key, 'base64')
+  const messageBytes = Buffer.from(value)
+  const encryptedBytes = sodium.seal(messageBytes, keyBytes)
 
   return {
     key_id: res.data.key_id,
-    // Base64 the encrypted secret
-    encrypted_value: sodium.to_base64(
-      encryptedBytes,
-      sodium.base64_variants.ORIGINAL,
-    ),
+    encrypted_value: Buffer.from(encryptedBytes).toString('base64'),
   }
 }