busbar-actions/Busbar Metadata Deploy

Cedar-policy-gated Salesforce deployment — plan, evaluate policy, optionally apply

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jun 5, 2026
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: busbar-actions/sf-metadata-deploy@69435a9746768355bdccf21e558269e52ef8a6e1 # no releases — HEAD as of 2026-07-11

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
target-instanceInstance URL of the Busbar-equipped target org (e.g. https://acme.my.salesforce.com). The binary OIDC-exchanges against this org in-process. REQUIRED for the default OIDC path.no""
source-refGit ref to deploy (commit, branch, or tag).noHEAD
base-refBase ref for the diff. Empty = diff against current org state.no""
pathsComma-separated paths to include in the deploy. Empty = whole diff.no""
test-levelApex test level: NoTestRun, RunLocalTests, or RunAllTestsInOrg.noRunLocalTests
policy-dirCedar policy bundle directory. Empty = agent config / built-in policies.no""
mode"plan" produces a Cedar-gated plan only. "apply" applies the plan when the policy decision is allow.noplan
fail-on-decisionFail the workflow when the policy decision is "deny". Set to "never" to report without failing.nodeny
backupTake a backup before apply (ignored in plan mode).notrue
commentDeployment comment recorded in the audit trail on apply.no""
comment-prPost the plan summary + policy decision as a PR comment on pull_request events.notrue
upload-artifactUpload the plan/apply reports as a workflow artifact.notrue
artifact-nameArtifact name when upload-artifact=true.nodeploy
org-aliasAlias the target org is registered under for this run (label only).notarget
versionRelease tag of the sf-deploy-action binary. Falls back to env.BUSBAR_ACTION_VERSION, then "latest".no""
binary-repoGitHub repo hosting prebuilt binary releases. Falls back to env.BUSBAR_ACTION_REPO, then busbar-actions/actions-dist.no""
namedescription
plan-idThe generated deployment plan ID.
decisionCedar policy decision: allow or deny.
violations-countNumber of policy violations.
risk-levelAssessed deployment risk level.
apply-statusApply status (empty in plan mode): succeeded, failed, partial.
deploy-idSalesforce deploy ID (empty in plan mode).
ground-hashGround provenance hash (commit_sha + content_hash) for the plan.