reponomics/Reponomics Dashboard Action

Collect GitHub repository traffic and growth data, generate data dashboards, and handle rotation of encryption secrets.

View on GitHub

Trust Signals

Scorecard Score
Scorecard 6–8scored Jul 9, 2026
Maintenance Recency
Activelast commit Jul 9, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: reponomics/reponomics-dashboard-action@1ccabb613cfd0424fb6442baee639b14c23d51bc # v0.33.1

tags can be moved; commit SHAs can't. why a SHA?

Inputs

namedescriptionrequireddefault
modeRuntime mode: collect, publish, rotate-key, incident-reset, update-docs, or doctor.yescollect
collection-tokenValue of the API token used for repository data collection. Template workflows pass the repository secret named COLLECTION_TOKEN.no""
use-github-appAdvanced option for collect mode. Set true when collection-token is a user-owned GitHub App installation token minted in the workflow.no""
github-tokenToken used for GitHub artifact/repository workflow operations. Required for collect artifact cleanup and incident-reset history purge; pass the caller workflow token through this input.no""
dashboard-secretCurrent dashboard/artifact encryption secret. Required when data-mode is encrypted.no""
dashboard-next-secretNext dashboard/artifact encryption secret for encrypted rotate-key or incident-reset mode.no""
comparison-secretOptional second dashboard secret for doctor mode. Used to check whether a user-held key can decrypt the current dashboard artifact without entering it as a workflow input.no""
incident-confirm-modeDestructive incident-reset confirmation. Must be INCIDENT_RESET_CONFIRMED for incident-reset mode.no""
incident-confirm-purgeDestructive incident-reset confirmation. Must be PURGE_OLD_HISTORY_CONFIRMED for incident-reset mode.no""
incident-confirm-next-secretDestructive incident-reset confirmation. Must be NEXT_SECRET_CONFIRMED for incident-reset mode.no""
incident-confirm-irreversibleDestructive incident-reset confirmation. Must be IRREVERSIBLE_ACTION_CONFIRMED for incident-reset mode.no""
data-modeData storage mode: encrypted or plaintext. Encrypted mode stores retained CSV artifacts and dashboard payloads encrypted with a dashboard secret. Plaintext mode stores retained CSV artifacts without encryption and is private-repository only.no""
config-pathRepository selection config path.noconfig.yaml
retention-daysGitHub Actions artifact retention period, from 14 to 90 days.no""
publish-pagesSet false to render dashboard output without deploying GitHub Pages. Plaintext mode always disables Pages deployment.no""
artifact-run-idOptional workflow run ID whose dashboard-data artifact should be restored. Blank restores the latest available dashboard-data artifact.no""
require-collect-provenanceDeprecated compatibility input for older generated templates. The runtime ignores this value because retained data migrations now decouple collect and publish.nofalse
generate-readmeGenerate private-repository README dashboard output and commit it back to the caller repository.no""
readme-pathREADME output path.noREADME.md

Outputs

namedescription
tracked-reposComma-separated repositories observed in canonical data.
collected-atLatest manifest update timestamp.
data-modeResolved data mode.
publish-pagesWhether this run publishes the rendered dashboard to GitHub Pages.
readme-updatedWhether the README output changed.
dashboard-updatedWhether the dashboard output changed.
pages-pathRendered dashboard directory uploaded to Pages or a downloadable dashboard artifact.
page-urlDeployed GitHub Pages URL when a Pages dashboard is published.
schema-versionRetained dashboard data artifact schema version.
runtime-versionReponomics action runtime version.
retention-daysResolved artifact retention period.
update-docs-stateManaged documentation update state.
docs-action-versionAction version that generated the local managed documentation.
docs-updated-atTimestamp recorded when the local managed documentation was last written.
doctor-report-pathPath to the machine-readable doctor diagnostic report when mode is doctor.