changes

.github/workflows/main.yml

@@ -12,13 +12,8 @@ jobs:
         mongodb-version: ['4.0', '4.2', '4.4', '5.0', '6.0']
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
-        with:
-          egress-policy: audit
-
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@v4
 
       - name: Start MongoDB Server
         uses: ./

.github/workflows/test-auth.yml

@@ -9,20 +9,15 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [18, 20]
-        mongodb-version: ['4.4', '5.0', '6.0']
+        node-version: [20, 22]
+        mongodb-version: ['5.0', '6.0', '7.0']
         mongodb-db: ['ci']
         mongodb-username: ['ci']
         mongodb-password: ['ci']
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
-        with:
-          egress-policy: audit
-
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@v4
 
       - name: Start MongoDB Server v${{ matrix.mongodb-version }}
         uses: ./
@@ -33,7 +28,7 @@ jobs:
           mongodb-password: ${{ matrix.mongodb-password }}
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
 

.github/workflows/test-replica-set.yml

@@ -9,17 +9,12 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [18, 20]
-        mongodb-version: ['4.4', '5.0', '6.0']
+        node-version: [20, 22]
+        mongodb-version: ['5.0', '6.0', '7.0']
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
-        with:
-          egress-policy: audit
-
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@v4
 
       - name: Start MongoDB Server v${{ matrix.mongodb-version }}
         uses: ./
@@ -28,7 +23,7 @@ jobs:
           mongodb-replica-set: mongodb-test-rs
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -45,19 +40,14 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [18, 20]
+        node-version: [20, 22]
         mongodb-port: [23456]
-        mongodb-version: ['4.4', '5.0', '6.0']
+        mongodb-version: ['5.0', '6.0', '7.0']
 
     name: MongoDB v${{ matrix.mongodb-version }} RS, Port ${{ matrix.mongodb-port }} — Node.js v${{ matrix.node-version }}
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
-        with:
-          egress-policy: audit
-
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@v4
 
       - name: Start MongoDB Server v${{ matrix.mongodb-version }}
         uses: ./
@@ -67,7 +57,7 @@ jobs:
           mongodb-replica-set: mongodb-test-rs
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
 

.github/workflows/test-single-instance.yml

@@ -9,25 +9,20 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [18, 20]
-        mongodb-version: ['4.4', '5.0', '6.0']
+        node-version: [20, 22]
+        mongodb-version: ['5.0', '6.0', '7.0']
 
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
-        with:
-          egress-policy: audit
-
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@v4
 
       - name: Start MongoDB Server v${{ matrix.mongodb-version }}
         uses: ./
         with:
           mongodb-version: ${{ matrix.mongodb-version }}
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -46,18 +41,13 @@ jobs:
     strategy:
       matrix:
         mongodb-port: [12345]
-        mongodb-version: ['4.4', '5.0', '6.0']
-        node-version: [18, 20]
+        mongodb-version: ['5.0', '6.0', '7.0']
+        node-version: [20, 22]
 
     name: MongoDB v${{ matrix.mongodb-version }}, Port ${{ matrix.mongodb-port }} — Node.js v${{ matrix.node-version }}
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
-        with:
-          egress-policy: audit
-
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@v4
 
       - name: Start MongoDB Server v${{ matrix.mongodb-version }}
         uses: ./
@@ -66,7 +56,7 @@ jobs:
           mongodb-port: ${{ matrix.mongodb-port }}
 
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node-version }}
 

README.md

@@ -33,7 +33,7 @@ jobs:
         node-version: ${{ matrix.node-version }}
 
     - name: Start MongoDB
-      uses: step-security/mongodb-github-action@1.11.0
+      uses: step-security/mongodb-github-action@1.12.0
       with:
         mongodb-version: ${{ matrix.mongodb-version }}
 
@@ -73,7 +73,7 @@ jobs:
         node-version: ${{ matrix.node-version }}
 
     - name: Start MongoDB
-      uses: step-security/mongodb-github-action@1.11.0
+      uses: step-security/mongodb-github-action@1.12.0
       with:
         mongodb-version: ${{ matrix.mongodb-version }}
         mongodb-replica-set: test-rs
@@ -117,7 +117,7 @@ jobs:
         node-version: ${{ matrix.node-version }}
 
     - name: Start MongoDB
-      uses: step-security/mongodb-github-action@1.11.0
+      uses: step-security/mongodb-github-action@1.12.0
       with:
         mongodb-version: ${{ matrix.mongodb-version }}
         mongodb-replica-set: test-rs
@@ -161,7 +161,7 @@ jobs:
         node-version: ${{ matrix.node-version }}
 
     - name: Start MongoDB
-      uses: step-security/mongodb-github-action@1.11.0
+      uses: step-security/mongodb-github-action@1.12.0
       with:
         mongodb-version: ${{ matrix.mongodb-version }}
         mongodb-username: supercharge
@@ -205,7 +205,7 @@ jobs:
         node-version: ${{ matrix.node-version }}
 
     - name: Start MongoDB
-      uses: step-security/mongodb-github-action@1.11.0
+      uses: step-security/mongodb-github-action@1.12.0
       with:
         mongodb-version: ${{ matrix.mongodb-version }}
         mongodb-container-name: mongodb-${{ matrix.node-version }}-${{ matrix.mongodb-version }}

action-types.yml

@@ -1,5 +1,7 @@
 # See https://github.com/krzema12/github-actions-typing
 inputs:
+  mongodb-image:
+    type: string
   mongodb-version:
     type: string
   mongodb-replica-set:

action.yml

@@ -6,6 +6,11 @@ branding:
   color: 'green'
 
 inputs:
+  mongodb-image:
+    description: 'MongoDB image to use (defaults to using "mongo" from Docker Hub but you could also use an image from another repository such as Amazons "public.ecr.aws/docker/library/mongo")'
+    required: false
+    default: 'mongo'
+
   mongodb-version:
     description: 'MongoDB version to use (default "latest")'
     required: false
@@ -45,6 +50,7 @@ runs:
   using: 'docker'
   image: 'Dockerfile'
   args:
+    - ${{ inputs.mongodb-image }}
     - ${{ inputs.mongodb-version }}
     - ${{ inputs.mongodb-replica-set }}
     - ${{ inputs.mongodb-port }}

package.json

@@ -7,10 +7,10 @@
   },
   "devDependencies": {
     "@supercharge/eslint-config": "~3.0.1",
-    "c8": "~9.1.0",
+    "c8": "~10.1.3",
     "eslint": "~8.57.0",
     "expect": "~29.7.0",
-    "mongoose": "~8.4.0",
+    "mongoose": "~8.9.3",
     "uvu": "~0.5.6"
   },
   "engines": {
@@ -19,7 +19,9 @@
   "homepage": "https://github.com/step-security/mongodb-github-action",
   "keywords": [
     "github",
-    "github-action"
+    "github-action",
+    "supercharge",
+    "superchargejs"
   ],
   "license": "MIT",
   "repository": {

start-mongodb.sh

@@ -1,13 +1,15 @@
 #!/bin/sh
 
 # Map input values from the GitHub Actions workflow to shell variables
-MONGODB_VERSION=$1
-MONGODB_REPLICA_SET=$2
-MONGODB_PORT=$3
-MONGODB_DB=$4
-MONGODB_USERNAME=$5
-MONGODB_PASSWORD=$6
-MONGODB_CONTAINER_NAME=$7
+MONGODB_IMAGE=$1
+MONGODB_VERSION=$2
+MONGODB_REPLICA_SET=$3
+MONGODB_PORT=$4
+MONGODB_DB=$5
+MONGODB_USERNAME=$6
+MONGODB_PASSWORD=$7
+MONGODB_CONTAINER_NAME=$8
+
 
 # validate subscription status
 API_URL="https://agent.api.stepsecurity.io/v1/github/$GITHUB_REPOSITORY/actions/subscription"
@@ -29,6 +31,13 @@ fi
 # `mongosh` is used starting from MongoDB 5.x
 MONGODB_CLIENT="mongosh --quiet"
 
+if [ -z "$MONGODB_IMAGE" ]; then
+  echo ""
+  echo "Missing MongoDB image in the [mongodb-image] input. Received value: $MONGODB_IMAGE"
+  echo ""
+
+  exit 2
+fi
 
 if [ -z "$MONGODB_VERSION" ]; then
   echo ""
@@ -38,6 +47,7 @@ if [ -z "$MONGODB_VERSION" ]; then
   exit 2
 fi
 
+echo "::group::Using MongoDB Docker image $MONGODB_IMAGE:$MONGODB_VERSION"
 
 echo "::group::Selecting correct MongoDB client"
 if [ "`echo $MONGODB_VERSION | cut -c 1`" -le "4" ]; then
@@ -100,7 +110,7 @@ if [ -z "$MONGODB_REPLICA_SET" ]; then
   echo "  - container-name [$MONGODB_CONTAINER_NAME]"
   echo ""
 
-  docker run --name $MONGODB_CONTAINER_NAME --publish $MONGODB_PORT:$MONGODB_PORT -e MONGO_INITDB_DATABASE=$MONGODB_DB -e MONGO_INITDB_ROOT_USERNAME=$MONGODB_USERNAME -e MONGO_INITDB_ROOT_PASSWORD=$MONGODB_PASSWORD --detach mongo:$MONGODB_VERSION --port $MONGODB_PORT
+  docker run --name $MONGODB_CONTAINER_NAME --publish $MONGODB_PORT:$MONGODB_PORT -e MONGO_INITDB_DATABASE=$MONGODB_DB -e MONGO_INITDB_ROOT_USERNAME=$MONGODB_USERNAME -e MONGO_INITDB_ROOT_PASSWORD=$MONGODB_PASSWORD --detach $MONGODB_IMAGE:$MONGODB_VERSION --port $MONGODB_PORT
 
   if [ $? -ne 0 ]; then
       echo "Error starting MongoDB Docker container"
@@ -121,7 +131,7 @@ echo "  - replica set [$MONGODB_REPLICA_SET]"
 echo ""
 
 
-docker run --name $MONGODB_CONTAINER_NAME --publish $MONGODB_PORT:$MONGODB_PORT --detach mongo:$MONGODB_VERSION --port $MONGODB_PORT --replSet $MONGODB_REPLICA_SET
+docker run --name $MONGODB_CONTAINER_NAME --publish $MONGODB_PORT:$MONGODB_PORT --detach $MONGODB_IMAGE:$MONGODB_VERSION --port $MONGODB_PORT --replSet $MONGODB_REPLICA_SET
 
 if [ $? -ne 0 ]; then
     echo "Error starting MongoDB Docker container"