{"repo":"zgosalvez/github-actions-ensure-sha-pinned-actions","free":true,"listed":false,"github":"https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions","clone":"git clone https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions.git","description":"A Github Action to ensure that actions are pinned to full length commit SHAs","language":"JavaScript","stars":55,"topics":["actions","github","github-actions"],"license":"MIT","category":"workflow-automation","readme_excerpt":"GitHub Action — Ensure SHA Pinned Actions This GitHub Action (written in JavaScript) allows you to leverage GitHub Actions to ensure that GitHub Actions are pinned to full length commit SHAs. This does not fail for referenced actions in the same repository when using the ./path/to/dir syntax. For more information, see \"using third-party actions.\" Usage Pre-requisites Create a workflow .yml file in your .github/workflows directory. An example workflow is available below. For more information, reference the GitHub Help Documentation for Creating a workflow file. Inputs For more information on these inputs, see the Workflow syntax for GitHub Actions - allowlist : The list of owners or repositories that will be ignored and will not throw an error. Each entry must be on a new line. Optional. Default: (deny all). For example, - dry run : Set to true to show warnings instead of failing. Optional. Default: false (fail on any error) Outputs None. This action will throw an error if it finds any GitHub Action that is not pinned to a full length commit SHAs. Note: Only the first error encountered will be reported. Common workflow Ideally, set this up as an initial job for your workflows. For example: Contributing See the contributing guide for detailed instructions on how to get started with our project. License The scripts and documentation in this project are released under the MIT License","default_branch":null,"files":null,"tree":[],"storefront":"/r/zgosalvez","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/zgosalvez/github-actions-ensure-sha-pinned-actions/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}