Skip to content

Please remove nowsecure from marketplace #64

@jsoref

Description

@jsoref

nowsecure appears prominently in the marketplace:

https://github.com/marketplace?query=nowsecure

Image

There's no need to list an action on the marketplace unless you're:

  • Supporting it
  • Looking for more consumers

Anyone can use any public github.com repository as an action source regardless of whether it is published to the marketplace (including from another action, such as your sbom action).

This action doesn't work anywhere close to out of the box

Using the standard use latest version button

Image

yields: https://github.com/check-spelling-sandbox/stunning-bassoon/actions/runs/13559420392

❌ Can't find 'action.yml', 'action.yaml' or 'Dockerfile' for action 'nowsecure/nowsecure-action@v4'.

The advertisement prose hints at problems

Image

> Note: The version listed on the Marketplace is old. Please refer to the "Releases" tab on the GitHub page for more information.

If you try to follow getting started

### For a New Workflow
For the easiest setup, see the [example annotated workflow](../workflows/basic.yml).

points to https://github.com/nowsecure/nowsecure-action/blob/901b53b55dfe9d9813e280078163629a04117269/workflows/basic.yml

you get https://github.com/check-spelling-sandbox/stunning-bassoon/actions/runs/13559514587

❌ This request has been automatically failed because it uses a deprecated version of actions/upload-artifact: v2. Learn more: https://github.blog/changelog/2024-02-13-deprecation-notice-v1-and-v2-of-the-artifact-actions/


There's no reason to continue advertising an action that people can't set up based on the available documentation.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions