Commit activity
Last 12 weeks · 1 commit
Community health
3 of 6 standards met
62
✓README✓License○Contributing✓Code of Conduct○Issue Template○PR Template
Recent PRs & issues
Quiet · 3 in progress · Last activity 2mo ago
See all on GitHub →
As part of hardening our github workflow, I have selected, Actions permissions, allow [OWNER], and select non-[OWNER] actions and reusable workflows. Allow actions by Marketplace verified creators. _Any action or reusable workflow that matches the specified criteria, plus those defined in a repository within [OWNER] can be used._ Learn more about allowing specific actions and reusable workflows to run. Because withastro/action@v6 is not a verified creator. See https://docs.github.com/en/apps/github-marketplace/github-marketplace-overview/applying-for-publisher-verification-for-your-organization I get the following error: [!WARNING] Error The action withastro/action@v6 is not allowed in [OWNER]/[REPOSITORY] because all actions must be from a repository owned by [OWNER], created by GitHub, or verified in the GitHub Marketplace. https://github.com/marketplace/actions/astro-deploy The requirements are: 1. Two factor authentication 2. A valid email for github to communicate to 3. A verified domain and ensure that a "Verified" badge displays on your organization's profile page. This is because I worry after the TanStack GitHub Actions cache poisoning hack. I'm no security expert, so I can not judge if this is efficient security hardening or needless complication.
Setting artifact name can be used when several build actions are required, for example to test build is correct under various package managers (npm, pnpm,...)
Still installs 11.6.2. The reason I want 11.10.0 is for the config setting to help with supply chain attacks. Is there any way we could get an so I could at least add in an override like ?
Recent fixes
Resolves #47 This PR includes trailing spaces removal on save. ⚠️ This is my very first PR to this repository, so I might be missing something important.
Summary Pin to the v5 release SHA () instead of the branch commit (), now that the change has been tagged. Removes the outdated comment about the change not being tagged yet.
In #88 we switched from https://github.com/actions/upload-pages-artifact to owning the code for uploading an artifact ourselves because v4 of that action had stopped including dotfiles (used for e.g. ) https://github.com/actions/upload-pages-artifact/pull/137 just added back the ability to include hidden files, so we can now switch back and avoid having to own all that extra code.
Structured data for AI agents
Repository: withastro/action. Description: A GitHub Action that deploys your Astro project to GitHub Pages Stars: 254, Forks: 56. Latest release: v6.1.1 (2mo ago). Open PRs: 3, open issues: 5. Last activity: 2mo ago. Community health: 62%. Top contributors: natemoo-re, delucis, colinhacks, Princesseuh, ThatXliner, ollecoffee, adrianmg, deining, swift502, torn4dom4n and others.