busbar-actions/Busbar Metadata Deploy
Cedar-policy-gated Salesforce deployment — plan, evaluate policy, optionally apply
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 5, 2026
- License
- None
Pinned Snippet
uses: busbar-actions/sf-metadata-deploy@69435a9746768355bdccf21e558269e52ef8a6e1 # no releases — HEAD as of 2026-07-11tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| target-instance | Instance URL of the Busbar-equipped target org (e.g. https://acme.my.salesforce.com). The binary OIDC-exchanges against this org in-process. REQUIRED for the default OIDC path. | no | "" |
| source-ref | Git ref to deploy (commit, branch, or tag). | no | HEAD |
| base-ref | Base ref for the diff. Empty = diff against current org state. | no | "" |
| paths | Comma-separated paths to include in the deploy. Empty = whole diff. | no | "" |
| test-level | Apex test level: NoTestRun, RunLocalTests, or RunAllTestsInOrg. | no | RunLocalTests |
| policy-dir | Cedar policy bundle directory. Empty = agent config / built-in policies. | no | "" |
| mode | "plan" produces a Cedar-gated plan only. "apply" applies the plan when the policy decision is allow. | no | plan |
| fail-on-decision | Fail the workflow when the policy decision is "deny". Set to "never" to report without failing. | no | deny |
| backup | Take a backup before apply (ignored in plan mode). | no | true |
| comment | Deployment comment recorded in the audit trail on apply. | no | "" |
| comment-pr | Post the plan summary + policy decision as a PR comment on pull_request events. | no | true |
| upload-artifact | Upload the plan/apply reports as a workflow artifact. | no | true |
| artifact-name | Artifact name when upload-artifact=true. | no | deploy |
| org-alias | Alias the target org is registered under for this run (label only). | no | target |
| version | Release tag of the sf-deploy-action binary. Falls back to env.BUSBAR_ACTION_VERSION, then "latest". | no | "" |
| binary-repo | GitHub repo hosting prebuilt binary releases. Falls back to env.BUSBAR_ACTION_REPO, then busbar-actions/actions-dist. | no | "" |
Outputs
| name | description |
|---|---|
| plan-id | The generated deployment plan ID. |
| decision | Cedar policy decision: allow or deny. |
| violations-count | Number of policy violations. |
| risk-level | Assessed deployment risk level. |
| apply-status | Apply status (empty in plan mode): succeeded, failed, partial. |
| deploy-id | Salesforce deploy ID (empty in plan mode). |
| ground-hash | Ground provenance hash (commit_sha + content_hash) for the plan. |