Add a safety cap to protect against unexpected failure

Author: marcusramberg

index.ts

@@ -19,7 +19,14 @@ export async function run(): Promise<void> {
 
   if (usersNotInGoogle.size > 0) {
     console.log(`Users not in google: ${Array.from(usersNotInGoogle).join(', ')}`)
-    if (config.removeUsers) await removeUsersFromGitHubOrg(usersNotInGoogle)
+
+    if (config.removeUsers) {
+      if (usersNotInGithub.size <= config.maxRemoveUsers) {
+        await removeUsersFromGitHubOrg(usersNotInGoogle)
+      } else {
+        console.log(`Not removing users because there are too many`)
+      }
+    }
   }
 
   const exitCode = usersNotInGoogle.size > 0 || usersNotInGithub.size > 0 ? config.exitCodeOnMissmatch : 0

src/config.ts

@@ -5,6 +5,9 @@ export const config = {
   get removeUsers(): boolean {
     return process.env.REMOVE_USERS?.toLowerCase() === 'true'
   },
+  get maxRemoveUsers(): number{
+    return parseInt(process.env.MAX_REMOVE_USERS ?? '0' ) || 100
+  },
   get exitCodeOnMissmatch(): number {
     return parseInt(process.env.EXIT_CODE_ON_MISMATCH ?? '0') || 0
   },