Adding trust certificate flag

Author: JosephDSchwartz

README.md

@@ -15,14 +15,15 @@ A GitHub Action that takes in a list of dependency scripts for a database, downl
 
 ## Inputs
 
-| Parameter                 | Is Required | Default | Description                                                                                                                                                                                        |
-| ------------------------- | ----------- | ------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `db-server-name`          | true        | N/A     | The server where the dependency files will be run.                                                                                                                                                 |
-| `db-name`                 | true        | N/A     | The name of the database where the dependency files will run.                                                                                                                                      |
-| `dependency-list`         | true        | N/A     | A json string containing a list of objects with the name of the dependency package, the version,the url where the package is stored, and optionally the auth token needed to download the package. |
-| `use-integrated-security` | true        | false   | Use domain integrated security. If false, a db-username and db-password should be specified. If true, those parameters will be ignored if specified.                                               |
-| `db-username`             | false       | N/A     | The username to use to login to the database. This is required if use-integrated-security is false, otherwise it's optional and will be ignored.                                                   |
-| `db-password`             | false       | N/A     | The password for the user logging in to the database. This is required if use-integrated-security is false, otherwise it's optional and will be ignored.                                           |
+| Parameter                  | Is Required | Default | Description                                                                                                                                                                                        |
+| -------------------------- | ----------- | ------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `db-server-name`           | true        | N/A     | The server where the dependency files will be run.                                                                                                                                                 |
+| `db-name`                  | true        | N/A     | The name of the database where the dependency files will run.                                                                                                                                      |
+| `dependency-list`          | true        | N/A     | A json string containing a list of objects with the name of the dependency package, the version,the url where the package is stored, and optionally the auth token needed to download the package. |
+| `use-integrated-security`  | true        | false   | Use domain integrated security. If false, a db-username and db-password should be specified. If true, those parameters will be ignored if specified.                                               |
+| `db-username`              | false       | N/A     | The username to use to login to the database. This is required if use-integrated-security is false, otherwise it's optional and will be ignored.                                                   |
+| `db-password`              | false       | N/A     | The password for the user logging in to the database. This is required if use-integrated-security is false, otherwise it's optional and will be ignored.                                           |
+| `trust-server-certificate` | false       | false   | A boolean that controls whether or not to validate the SQL Server TLS certificate.                                                                                                                 |
 
 The `dependency-list` should be an array of objects with the following properties:
 
@@ -59,6 +60,7 @@ jobs:
         with:
           db-server-name: 'localhost,1433'
           db-name: 'LocalDb'
+          trust-server-certificate: 'true'
           dependency-list: '[{"version":"1.0.0","packageName":"dbo.Something","nugetUrl":"https://nuget.pkg.github.com/my-org/download/Something/1.0.0/dbo.Something.1.0.0.nupkg","authToken":"ghp_dkfsjakldafl"},{"version":"1.2.0","packageName":"dbo.SomeOtherThing","nugetUrl":"https://nuget.pkg.github.com/my-org/download/SomeOtherThing/1.2.0/dbo.SomeOtherThing1.2.0.nupkg","authToken":"ghp_dkfsjakldafl"}]'
 ```
 

action.yml

@@ -22,6 +22,10 @@ inputs:
   db-password:
     description: The password for the user logging in to the database. This is required if use-integrated-security is false, otherwise it's optional and will be ignored.
     required: false
+  trust-server-certificate:
+    description: A boolean that controls whether or not to validate the SQL Server TLS certificate.
+    required: false
+    default: 'false'
 
 runs:
   using: 'composite'
@@ -42,4 +46,5 @@ runs:
           -dbName "${{ inputs.db-name }}" `
           -useIntegratedSecurity:$${{ inputs.use-integrated-security }} `
           -username "${{ inputs.db-username }}" `
-          -password $securePassword
+          -password $securePassword `
+          -trustServerCertificate:$${{ inputs.trust-server-certificate }}

src/run-db-dependencies.ps1

@@ -3,7 +3,8 @@ param (
     [string]$dbName,
     [switch]$useIntegratedSecurity = $false,
     [string]$username,
-    [securestring]$password
+    [securestring]$password,
+    [switch]$trustServerCertificate
 )
 
 Write-Host "Running database dependency scripts"
@@ -21,6 +22,10 @@ $sqlCmdParams = @(
     "-Verbose"
 )
 
+if ($trustServerCertificate) {
+    $sqlCmdParams += "-TrustServerCertificate"
+}
+
 $temp2 = [string]::Join(" ", $sqlCmdParams)
 $temp = @("Invoke-Sqlcmd $temp2")