aquaproj/Update aqua-checksums.json

Update aqua-checksums.json

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Activelast commit Jul 10, 2026
License: MIT

Pinned Snippet

workflow.ymlSHA-pinned

uses: aquaproj/update-checksum-action@c5df5a5c2a897a9b807068f062140506d092e7ac # v0.2.7

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
working_directory	The working directory where `aqua update-checksum` is executed. If this input is not specified, the current working directory is used.	no	—
prune	If this input is `true`, `aqua update-checksum` is executed with `-prune` option. This option removes unused checksums from the checksum file. If this input is not specified, `false` is used.	no	false
skip_push	If this input is `true`, the action checks if the checksum file is up-to-date, but does not push a commit to update it. If this input is not specified, `false` is used. This input is useful when you want to check if the checksum file is up-to-date without pushing a commit.	no	false
github_token	GitHub Access token.	no	${{github.token}}
read_checksum_token	This token overrides `AQUA_GITHUB_TOKEN` to executes `aqua update-checksum`. It must have `contents:read` permission about all repositories in tools managed by `aqua`. This input is useful to fetch checksum from private repositories.	no	""
securefix_action_server_repository	The GitHub repository for the Securefix Action server. https://github.com/csm-actions/securefix-action If this is set, this action uses Securefix Action to update aqua-checksums.json.	no	""
securefix_action_app_id	The GitHub App ID for the Securefix Action client.	no	""
securefix_action_app_private_key	The GitHub App private key for the Securefix Action client.	no	""

Outputs

no outputs