busbar-actions/Busbar — sf-busbar-setup

Make a Salesforce org Busbar-ready (install packages, ECA OAuth policy, permission set, token-exchange handler) and establish NARROW OIDC trust from on-disk JSON specs — by running the Rust `sf-busbar-setup` binary directly. NO Node, NO Salesforce CLI, NO plugin: the binary IS the headless reconciler and downloads in <1s from actions-dist.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jul 4, 2026
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: busbar-actions/sf-busbar-setup@f35192c4374d13dad7d141f47a16b733564ff39a # no releases — HEAD as of 2026-07-11

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
busbar-packagebusbar (core) package version — 04t id or alias.yes
github-packagebusbar-github (adapter) package version — 04t id or alias.yes
skip-nebulaSkip the Nebula Logger dependency install.nofalse
execution-userApex execution / run-as user for the handler. Empty => the authenticated (scratch admin) session user.no""
api-versionSalesforce API version for deploys/queries.no66.0
trust-specsPath to a JSON trust-rule spec file (or a directory of *.json specs) relative to the checked-out repo. Each rule's claims (repository, workflow basename, ref, environment) are REQUIRED named fields — a broad rule can't be expressed. The run-as is always the authenticated (scratch admin) session user. Empty => skip the trust phase.no""
hub-instance-urlOPTIONAL: instance URL of a Busbar Hub org to register this org with (POST hub/v1/orgs, an idempotent upsert). Authenticated INDEPENDENTLY of the target-org session via its own OIDC exchange — requires `permissions: id-token: write` on the caller's job. Empty => skip Hub registration entirely.no""
target-instanceInstance URL to OIDC-self-mint against (requires id-token: write + an existing trust rule).yes
eca-client-idOPTIONAL ECA consumer key override for the OIDC exchange.no""
token-handlerOPTIONAL Apex token-exchange handler dev name override.no""
versionsf-busbar-setup release tag to download (e.g. 0.0.9). "latest" resolves the most recent release.nolatest
binary-repoGitHub repo that publishes the sf-busbar-setup binary releases.nobusbar-actions/actions-dist

no outputs