WELA/.github/workflows/create-csv.yml

name: Create auditpol_output.csv

on:
  workflow_dispatch:

permissions:
  contents: write

jobs:
  build:
    strategy:
      matrix:
        os: [windows-2022, windows-2025]
    runs-on: ${{ matrix.os }}
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - name: Generate csv from auditpol /list /subcategory:* /r
        run: |
              $data = auditpol /list /subcategory:* /r
              $output = @()
              $category = ""
              foreach ($line in $data) {
                  if ($line -match "^Category/Subcategory") { continue }
                  if ($line -match "^\s+(.+),\{(.+)\}$") {
                      $subcategory = $matches[1].Trim()
                      $guid = $matches[2].Trim()
                      $output += [PSCustomObject]@{
                          Category    = $category
                          Subcategory = $subcategory
                          GUID        = $guid
                      }
                  } elseif ($line -match "^(.+),\{(.+)\}$") {
                      $category = $matches[1].Trim()
                      $guid = $matches[2].Trim()
                      $output += [PSCustomObject]@{
                          Category    = $category
                          Subcategory = ""
                          GUID        = $guid
                      }
                  }
              }
              $output | Export-Csv -Path "config/eid_subcategory_mapping-org.csv" -NoTypeInformation -Encoding UTF8
              $output | Format-Table -AutoSize

      - name: Configure Git
        run: |
          git config --global user.name 'github-actions[bot]'
          git config --global user.email 'github-actions[bot]@users.noreply.github.com'

      - name: Commit changes
        run: |
          # 生成先は config/ 配下なので、ルート直下の *.csv では拾えない
          git add config/*.csv
          # git diff-index の終了コードを見る($? を使わないと出力の真偽値判定になってしまう)
          git diff-index --quiet HEAD
          if ($LASTEXITCODE -eq 0) {
            echo "No changes to commit"
          } else {
            git commit -m "Automated update"
            git push origin main
          }