@cloudsnorkel/cdk-github-runners 0.3.2 → 0.4.0

package/lib/lambdas/status/index.js

@@ -16,7 +16,10 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target, mod));
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 
 // node_modules/universal-user-agent/dist-node/index.js
 var require_dist_node = __commonJS({
@@ -5951,11 +5954,14 @@ var require_lib3 = __commonJS({
       blob() {
         let ct = this.headers && this.headers.get("content-type") || "";
         return consumeBody.call(this).then(function(buf) {
-          return Object.assign(new Blob([], {
-            type: ct.toLowerCase()
-          }), {
-            [BUFFER]: buf
-          });
+          return Object.assign(
+            new Blob([], {
+              type: ct.toLowerCase()
+            }),
+            {
+              [BUFFER]: buf
+            }
+          );
         });
       },
       json() {
@@ -7012,12 +7018,15 @@ var require_dist_node5 = __commonJS({
       let status;
       let url;
       const fetch = requestOptions.request && requestOptions.request.fetch || nodeFetch;
-      return fetch(requestOptions.url, Object.assign({
-        method: requestOptions.method,
-        body: requestOptions.body,
-        headers: requestOptions.headers,
-        redirect: requestOptions.redirect
-      }, requestOptions.request)).then(async (response) => {
+      return fetch(requestOptions.url, Object.assign(
+        {
+          method: requestOptions.method,
+          body: requestOptions.body,
+          headers: requestOptions.headers,
+          redirect: requestOptions.redirect
+        },
+        requestOptions.request
+      )).then(async (response) => {
         url = response.url;
         status = response.status;
         for (const keyAndValue of response.headers) {
@@ -7425,7 +7434,7 @@ var require_dist_node6 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.0";
+    var VERSION = "7.0.1";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -7511,7 +7520,7 @@ var require_dist_node8 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node7();
-    var VERSION = "6.2.0";
+    var VERSION = "6.2.1";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -7524,12 +7533,15 @@ var require_dist_node8 = __commonJS({
       let status;
       let url;
       const fetch = requestOptions.request && requestOptions.request.fetch || globalThis.fetch || nodeFetch;
-      return fetch(requestOptions.url, Object.assign({
-        method: requestOptions.method,
-        body: requestOptions.body,
-        headers: requestOptions.headers,
-        redirect: requestOptions.redirect
-      }, requestOptions.request)).then(async (response) => {
+      return fetch(requestOptions.url, Object.assign(
+        {
+          method: requestOptions.method,
+          body: requestOptions.body,
+          headers: requestOptions.headers,
+          redirect: requestOptions.redirect
+        },
+        requestOptions.request
+      )).then(async (response) => {
         url = response.url;
         status = response.status;
         for (const keyAndValue of response.headers) {
@@ -7980,7 +7992,7 @@ var require_dist_node10 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.0";
+    var VERSION = "7.0.1";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -8066,7 +8078,7 @@ var require_dist_node12 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node11();
-    var VERSION = "6.2.0";
+    var VERSION = "6.2.1";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -8079,12 +8091,15 @@ var require_dist_node12 = __commonJS({
       let status;
       let url;
       const fetch = requestOptions.request && requestOptions.request.fetch || globalThis.fetch || nodeFetch;
-      return fetch(requestOptions.url, Object.assign({
-        method: requestOptions.method,
-        body: requestOptions.body,
-        headers: requestOptions.headers,
-        redirect: requestOptions.redirect
-      }, requestOptions.request)).then(async (response) => {
+      return fetch(requestOptions.url, Object.assign(
+        {
+          method: requestOptions.method,
+          body: requestOptions.body,
+          headers: requestOptions.headers,
+          redirect: requestOptions.redirect
+        },
+        requestOptions.request
+      )).then(async (response) => {
         url = response.url;
         status = response.status;
         for (const keyAndValue of response.headers) {
@@ -8565,7 +8580,7 @@ var require_dist_node14 = __commonJS({
       endpoint.headers.authorization = `token ${token}`;
       return request2(endpoint);
     }
-    var VERSION = "4.0.0";
+    var VERSION = "4.0.1";
     function createOAuthDeviceAuth(options) {
       const requestWithDefaults = options.request || request.request.defaults({
         headers: {
@@ -8613,7 +8628,7 @@ var require_dist_node15 = __commonJS({
     var authOauthDevice = require_dist_node14();
     var oauthMethods = require_dist_node13();
     var btoa = _interopDefault(require_btoa_node());
-    var VERSION = "2.0.2";
+    var VERSION = "2.0.3";
     async function getAuthentication(state) {
       if ("code" in state.strategyOptions) {
         const {
@@ -9792,14 +9807,18 @@ var require_ms = __commonJS({
       } else if (type === "number" && isFinite(val)) {
         return options.long ? fmtLong(val) : fmtShort(val);
       }
-      throw new Error("val is not a non-empty string or a valid number. val=" + JSON.stringify(val));
+      throw new Error(
+        "val is not a non-empty string or a valid number. val=" + JSON.stringify(val)
+      );
     };
     function parse(str) {
       str = String(str);
       if (str.length > 100) {
         return;
       }
-      var match = /^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(str);
+      var match = /^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(
+        str
+      );
       if (!match) {
         return;
       }
@@ -12739,7 +12758,7 @@ var require_dist_node18 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.0";
+    var VERSION = "7.0.1";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -12825,7 +12844,7 @@ var require_dist_node20 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node19();
-    var VERSION = "6.2.0";
+    var VERSION = "6.2.1";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -12838,12 +12857,15 @@ var require_dist_node20 = __commonJS({
       let status;
       let url;
       const fetch = requestOptions.request && requestOptions.request.fetch || globalThis.fetch || nodeFetch;
-      return fetch(requestOptions.url, Object.assign({
-        method: requestOptions.method,
-        body: requestOptions.body,
-        headers: requestOptions.headers,
-        redirect: requestOptions.redirect
-      }, requestOptions.request)).then(async (response) => {
+      return fetch(requestOptions.url, Object.assign(
+        {
+          method: requestOptions.method,
+          body: requestOptions.body,
+          headers: requestOptions.headers,
+          redirect: requestOptions.redirect
+        },
+        requestOptions.request
+      )).then(async (response) => {
         url = response.url;
         status = response.status;
         for (const keyAndValue of response.headers) {
@@ -14096,7 +14118,9 @@ var require_dist_node25 = __commonJS({
         case "app":
           return getAppAuthentication(state);
         case "oauth":
-          state.log.warn(new deprecation.Deprecation(`[@octokit/auth-app] {type: "oauth"} is deprecated. Use {type: "oauth-app"} instead`));
+          state.log.warn(
+            new deprecation.Deprecation(`[@octokit/auth-app] {type: "oauth"} is deprecated. Use {type: "oauth-app"} instead`)
+          );
         case "oauth-app":
           return state.oauthApp({
             type: "oauth-app"
@@ -14169,7 +14193,11 @@ var require_dist_node25 = __commonJS({
       const {
         token,
         createdAt
-      } = await getInstallationAuthentication(state, {}, request2);
+      } = await getInstallationAuthentication(
+        state,
+        {},
+        request2
+      );
       endpoint.headers.authorization = `token ${token}`;
       return sendRequestWithRetries(state, request2, endpoint, createdAt);
     }
@@ -14690,6 +14718,8 @@ function baseUrlFromDomain(domain) {
 }
 
 // src/lambdas/status/index.ts
+var cfn = new AWS2.CloudFormation();
+var ecr = new AWS2.ECR();
 var sf = new AWS2.StepFunctions();
 function secretArnToUrl(arn) {
   const parts = arn.split(":");
@@ -14709,8 +14739,36 @@ function stepFunctionArnToUrl(arn) {
   const region = parts[3];
   return `https://${region}.console.aws.amazon.com/states/home?region=${region}#/statemachines/view/${arn}`;
 }
+async function generateProvidersStatus(stack, logicalId) {
+  var _a;
+  const resource = await cfn.describeStackResource({ StackName: stack, LogicalResourceId: logicalId }).promise();
+  const providers = JSON.parse(((_a = resource.StackResourceDetail) == null ? void 0 : _a.Metadata) ?? "{}").providers;
+  if (!providers) {
+    return {};
+  }
+  return Promise.all(providers.map(async (p) => {
+    var _a2, _b, _c;
+    if ((_b = (_a2 = p.image) == null ? void 0 : _a2.imageRepository) == null ? void 0 : _b.match(/[0-9]+\.dkr\.ecr\.[a-z0-9\-]+\.amazonaws\.com\/.+/)) {
+      const tags = await ecr.describeImages({
+        repositoryName: p.image.imageRepository.split("/")[1],
+        filter: {
+          tagStatus: "TAGGED"
+        },
+        maxResults: 1
+      }).promise();
+      if (tags.imageDetails && ((_c = tags.imageDetails) == null ? void 0 : _c.length) >= 1) {
+        p.image.latestImage = {
+          tags: tags.imageDetails[0].imageTags,
+          digest: tags.imageDetails[0].imageDigest,
+          date: tags.imageDetails[0].imagePushedAt
+        };
+      }
+    }
+    return p;
+  }));
+}
 exports.handler = async function() {
-  if (!process.env.WEBHOOK_SECRET_ARN || !process.env.GITHUB_SECRET_ARN || !process.env.GITHUB_PRIVATE_KEY_SECRET_ARN || !process.env.PROVIDERS || !process.env.WEBHOOK_HANDLER_ARN || !process.env.STEP_FUNCTION_ARN || !process.env.SETUP_SECRET_ARN || !process.env.SETUP_FUNCTION_URL) {
+  if (!process.env.WEBHOOK_SECRET_ARN || !process.env.GITHUB_SECRET_ARN || !process.env.GITHUB_PRIVATE_KEY_SECRET_ARN || !process.env.LOGICAL_ID || !process.env.WEBHOOK_HANDLER_ARN || !process.env.STEP_FUNCTION_ARN || !process.env.SETUP_SECRET_ARN || !process.env.SETUP_FUNCTION_URL || !process.env.STACK_NAME) {
     throw new Error("Missing environment variables");
   }
   const status = {
@@ -14743,7 +14801,7 @@ exports.handler = async function() {
         personalAuthToken: ""
       }
     },
-    providers: JSON.parse(process.env.PROVIDERS),
+    providers: await generateProvidersStatus(process.env.STACK_NAME, process.env.LOGICAL_ID),
     troubleshooting: {
       webhookHandlerArn: process.env.WEBHOOK_HANDLER_ARN,
       webhookHandlerUrl: lambdaArnToUrl(process.env.WEBHOOK_HANDLER_ARN),
@@ -14844,7 +14902,7 @@ exports.handler = async function() {
       for (const installation of installations) {
         let installationDetails = {
           id: installation.id,
-          url: `https://${githubSecrets.domain}/settings/installations/${installation.id}`,
+          url: installation.html_url,
           status: "Unable to query",
           repositories: []
         };

package/lib/lambdas/token-retriever/index.js

@@ -16,7 +16,10 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target, mod));
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 
 // node_modules/universal-user-agent/dist-node/index.js
 var require_dist_node = __commonJS({
@@ -5951,11 +5954,14 @@ var require_lib3 = __commonJS({
       blob() {
         let ct = this.headers && this.headers.get("content-type") || "";
         return consumeBody.call(this).then(function(buf) {
-          return Object.assign(new Blob([], {
-            type: ct.toLowerCase()
-          }), {
-            [BUFFER]: buf
-          });
+          return Object.assign(
+            new Blob([], {
+              type: ct.toLowerCase()
+            }),
+            {
+              [BUFFER]: buf
+            }
+          );
         });
       },
       json() {
@@ -7012,12 +7018,15 @@ var require_dist_node5 = __commonJS({
       let status;
       let url;
       const fetch = requestOptions.request && requestOptions.request.fetch || nodeFetch;
-      return fetch(requestOptions.url, Object.assign({
-        method: requestOptions.method,
-        body: requestOptions.body,
-        headers: requestOptions.headers,
-        redirect: requestOptions.redirect
-      }, requestOptions.request)).then(async (response) => {
+      return fetch(requestOptions.url, Object.assign(
+        {
+          method: requestOptions.method,
+          body: requestOptions.body,
+          headers: requestOptions.headers,
+          redirect: requestOptions.redirect
+        },
+        requestOptions.request
+      )).then(async (response) => {
         url = response.url;
         status = response.status;
         for (const keyAndValue of response.headers) {
@@ -7425,7 +7434,7 @@ var require_dist_node6 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.0";
+    var VERSION = "7.0.1";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -7511,7 +7520,7 @@ var require_dist_node8 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node7();
-    var VERSION = "6.2.0";
+    var VERSION = "6.2.1";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -7524,12 +7533,15 @@ var require_dist_node8 = __commonJS({
       let status;
       let url;
       const fetch = requestOptions.request && requestOptions.request.fetch || globalThis.fetch || nodeFetch;
-      return fetch(requestOptions.url, Object.assign({
-        method: requestOptions.method,
-        body: requestOptions.body,
-        headers: requestOptions.headers,
-        redirect: requestOptions.redirect
-      }, requestOptions.request)).then(async (response) => {
+      return fetch(requestOptions.url, Object.assign(
+        {
+          method: requestOptions.method,
+          body: requestOptions.body,
+          headers: requestOptions.headers,
+          redirect: requestOptions.redirect
+        },
+        requestOptions.request
+      )).then(async (response) => {
         url = response.url;
         status = response.status;
         for (const keyAndValue of response.headers) {
@@ -7980,7 +7992,7 @@ var require_dist_node10 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.0";
+    var VERSION = "7.0.1";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -8066,7 +8078,7 @@ var require_dist_node12 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node11();
-    var VERSION = "6.2.0";
+    var VERSION = "6.2.1";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -8079,12 +8091,15 @@ var require_dist_node12 = __commonJS({
       let status;
       let url;
       const fetch = requestOptions.request && requestOptions.request.fetch || globalThis.fetch || nodeFetch;
-      return fetch(requestOptions.url, Object.assign({
-        method: requestOptions.method,
-        body: requestOptions.body,
-        headers: requestOptions.headers,
-        redirect: requestOptions.redirect
-      }, requestOptions.request)).then(async (response) => {
+      return fetch(requestOptions.url, Object.assign(
+        {
+          method: requestOptions.method,
+          body: requestOptions.body,
+          headers: requestOptions.headers,
+          redirect: requestOptions.redirect
+        },
+        requestOptions.request
+      )).then(async (response) => {
         url = response.url;
         status = response.status;
         for (const keyAndValue of response.headers) {
@@ -8565,7 +8580,7 @@ var require_dist_node14 = __commonJS({
       endpoint.headers.authorization = `token ${token}`;
       return request2(endpoint);
     }
-    var VERSION = "4.0.0";
+    var VERSION = "4.0.1";
     function createOAuthDeviceAuth(options) {
       const requestWithDefaults = options.request || request.request.defaults({
         headers: {
@@ -8613,7 +8628,7 @@ var require_dist_node15 = __commonJS({
     var authOauthDevice = require_dist_node14();
     var oauthMethods = require_dist_node13();
     var btoa = _interopDefault(require_btoa_node());
-    var VERSION = "2.0.2";
+    var VERSION = "2.0.3";
     async function getAuthentication(state) {
       if ("code" in state.strategyOptions) {
         const {
@@ -9792,14 +9807,18 @@ var require_ms = __commonJS({
       } else if (type === "number" && isFinite(val)) {
         return options.long ? fmtLong(val) : fmtShort(val);
       }
-      throw new Error("val is not a non-empty string or a valid number. val=" + JSON.stringify(val));
+      throw new Error(
+        "val is not a non-empty string or a valid number. val=" + JSON.stringify(val)
+      );
     };
     function parse(str) {
       str = String(str);
       if (str.length > 100) {
         return;
       }
-      var match = /^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(str);
+      var match = /^(-?(?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)?$/i.exec(
+        str
+      );
       if (!match) {
         return;
       }
@@ -12739,7 +12758,7 @@ var require_dist_node18 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.0";
+    var VERSION = "7.0.1";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -12825,7 +12844,7 @@ var require_dist_node20 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node19();
-    var VERSION = "6.2.0";
+    var VERSION = "6.2.1";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -12838,12 +12857,15 @@ var require_dist_node20 = __commonJS({
       let status;
       let url;
       const fetch = requestOptions.request && requestOptions.request.fetch || globalThis.fetch || nodeFetch;
-      return fetch(requestOptions.url, Object.assign({
-        method: requestOptions.method,
-        body: requestOptions.body,
-        headers: requestOptions.headers,
-        redirect: requestOptions.redirect
-      }, requestOptions.request)).then(async (response) => {
+      return fetch(requestOptions.url, Object.assign(
+        {
+          method: requestOptions.method,
+          body: requestOptions.body,
+          headers: requestOptions.headers,
+          redirect: requestOptions.redirect
+        },
+        requestOptions.request
+      )).then(async (response) => {
         url = response.url;
         status = response.status;
         for (const keyAndValue of response.headers) {
@@ -14096,7 +14118,9 @@ var require_dist_node25 = __commonJS({
         case "app":
           return getAppAuthentication(state);
         case "oauth":
-          state.log.warn(new deprecation.Deprecation(`[@octokit/auth-app] {type: "oauth"} is deprecated. Use {type: "oauth-app"} instead`));
+          state.log.warn(
+            new deprecation.Deprecation(`[@octokit/auth-app] {type: "oauth"} is deprecated. Use {type: "oauth-app"} instead`)
+          );
         case "oauth-app":
           return state.oauthApp({
             type: "oauth-app"
@@ -14169,7 +14193,11 @@ var require_dist_node25 = __commonJS({
       const {
         token,
         createdAt
-      } = await getInstallationAuthentication(state, {}, request2);
+      } = await getInstallationAuthentication(
+        state,
+        {},
+        request2
+      );
       endpoint.headers.authorization = `token ${token}`;
       return sendRequestWithRetries(state, request2, endpoint, createdAt);
     }

package/lib/lambdas/update-lambda/index.js

@@ -17,7 +17,10 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target, mod));
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/lambdas/update-lambda/index.ts
@@ -31,7 +34,7 @@ var cfn = new AWS.CloudFormation();
 var lambda = new AWS.Lambda();
 async function handler(event) {
   var _a;
-  console.log(event);
+  console.log(JSON.stringify(event));
   const stacks = await cfn.describeStacks({
     StackName: event.stackName
   }).promise();

package/lib/lambdas/webhook-handler/index.js

@@ -13,7 +13,10 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target, mod));
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 
 // src/lambdas/webhook-handler/index.ts
 var crypto = __toESM(require("crypto"));
@@ -40,11 +43,14 @@ async function getSecretJsonValue(arn) {
 var sf = new AWS2.StepFunctions();
 function verifyBody(event, secret) {
   const sig = Buffer.from(event.headers["x-hub-signature-256"] || "", "utf8");
-  let body = event.body;
+  if (!event.body) {
+    throw new Error("No body");
+  }
+  let body;
   if (event.isBase64Encoded) {
-    body = Buffer.from(body, "base64");
+    body = Buffer.from(event.body, "base64");
   } else {
-    body = Buffer.from(body || "", "utf8");
+    body = Buffer.from(event.body || "", "utf8");
   }
   const hmac = crypto.createHmac("sha256", secret);
   hmac.update(body);
@@ -53,7 +59,7 @@ function verifyBody(event, secret) {
   if (sig.length !== expectedSig.length || !crypto.timingSafeEqual(sig, expectedSig)) {
     throw new Error(`Signature mismatch. Expected ${expectedSig.toString()} but got ${sig.toString()}`);
   }
-  return body;
+  return body.toString();
 }
 exports.handler = async function(event) {
   var _a;

package/lib/providers/codebuild.d.ts

@@ -1,6 +1,6 @@
 import { aws_codebuild as codebuild, aws_ec2 as ec2, aws_iam as iam, aws_stepfunctions as stepfunctions, Duration } from 'aws-cdk-lib';
 import { Construct } from 'constructs';
-import { IImageBuilder, IRunnerProvider, RunnerProviderProps, RunnerRuntimeParameters } from './common';
+import { IImageBuilder, IRunnerProvider, RunnerImage, RunnerProviderProps, RunnerRuntimeParameters } from './common';
 export interface CodeBuildRunnerProps extends RunnerProviderProps {
     /**
      * Provider running an image to run inside CodeBuild with GitHub runner pre-configured. A user named `runner` is expected to exist with access to Docker-in-Docker.
@@ -100,6 +100,10 @@ export declare class CodeBuildRunner extends Construct implements IRunnerProvide
      * Grant principal used to add permissions to the runner role.
      */
     readonly grantPrincipal: iam.IPrincipal;
+    /**
+     * Docker image in CodeBuild project.
+     */
+    readonly image: RunnerImage;
     constructor(scope: Construct, id: string, props: CodeBuildRunnerProps);
     /**
      * Generate step function task(s) to start a new runner.