gioragutt/Find unverified Github Actions
Scans your Github Actions Workflows for unverified actions
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
- Runtime
- Deprecated runtime
Inputs
| name | description | required | default |
|---|---|---|---|
| workflows-dir | Path to a workflows directory to scan | yes | .github/workflows |
Outputs
| name | description |
|---|---|
| found-unverified-actions | Whether or not unverified actions were found |
| verified-actions | JSON array of the verified actions found |
| unverified-actions | JSON array of the unverified actions found |
| custom-actions | JSON array of the custom actions found |
| unknown-actions | JSON array of actions the scanner couldn't understand |