busbar-actions/Busbar GitHub Workflow Parser
Parses a GitHub Actions workflow into a Component Integrity Matrix and transmits it to Salesforce using OIDC zero-trust Token Exchange
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| target-instance | Instance URL of the Busbar-equipped target org (e.g. https://acme.my.salesforce.com). The binary OIDC-exchanges against this org in-process. REQUIRED for the default OIDC path. | no | "" |
| workflow | Path to the GitHub Actions workflow YAML file. Optional in scanner mode: if omitted, every workflow under .github/workflows/ is analyzed. | no | "" |
| sha | Git Commit SHA of the executing workflow context. | no | ${{ github.sha }} |
| rest-endpoint | REST API Endpoint to POST the manifest to on Salesforce (used only if target-instance is set). Defaults to the managed-install path (busbar namespace). For a non-namespaced source-deploy/dev org, set this to /services/apexrest/GitHubWorkflowSync. | no | /services/apexrest/busbar/GitHubWorkflowSync |
| output-path | Path to write the JSON integrity matrix. | no | ${{ runner.temp }}/workflow-reports/integrity.json |
| upload-artifact | Upload the JSON report as a workflow artifact. | no | true |
| artifact-name | Artifact name when upload-artifact=true. | no | workflow-integrity-report |
| report | Scanner mode: run the security rule pack and emit a findings report instead of the integrity-sync flow. | no | false |
| format | Report output format(s): json, sarif, or both. | no | json |
| sarif-out | Path for the SARIF file. | no | "" |
| report-out | Path for the canonical JSON report. | no | "" |
| fail-on | Fail the action (exit 1) if any finding is at or above this severity (critical, high, medium, hygiene, none). | no | none |
| version | Release tag of the gh-workflow-parser binary. Falls back to env.BUSBAR_ACTION_VERSION, then "latest". | no | "" |
| binary-repo | GitHub repo hosting prebuilt binary releases. Falls back to env.BUSBAR_ACTION_REPO, then busbar-actions/actions-dist. | no | "" |
Outputs
| name | description |
|---|---|
| workflow-hash | The computed SHA-256 hash of the workflow file. |
| report-path | Path to the generated JSON report. |
| sarif-path | Path to the generated SARIF report (if format is sarif or both). |