-
Notifications
You must be signed in to change notification settings - Fork 17
Description
nowsecure appears prominently in the marketplace:
https://github.com/marketplace?query=nowsecure
There's no need to list an action on the marketplace unless you're:
- Supporting it
- Looking for more consumers
Anyone can use any public github.com repository as an action source regardless of whether it is published to the marketplace (including from another action, such as your sbom action).
This action doesn't work anywhere close to out of the box
Using the standard use latest version button
yields: https://github.com/check-spelling-sandbox/stunning-bassoon/actions/runs/13559420392
❌ Can't find 'action.yml', 'action.yaml' or 'Dockerfile' for action 'nowsecure/nowsecure-action@v4'.
The advertisement prose hints at problems
Line 5 in 901b53b
| > Note: The version listed on the Marketplace is old. Please refer to the "Releases" tab on the GitHub page for more information. |
If you try to follow getting started
nowsecure-action/docs/getting-started.md
Lines 17 to 19 in 901b53b
| ### For a New Workflow | |
| For the easiest setup, see the [example annotated workflow](../workflows/basic.yml). |
you get https://github.com/check-spelling-sandbox/stunning-bassoon/actions/runs/13559514587
❌ This request has been automatically failed because it uses a deprecated version of
actions/upload-artifact: v2. Learn more: https://github.blog/changelog/2024-02-13-deprecation-notice-v1-and-v2-of-the-artifact-actions/
There's no reason to continue advertising an action that people can't set up based on the available documentation.