github-actions-maintainer 0.5.0

General-purpose GitHub Actions maintenance toolkit with secure workflow pinning
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108

name: GitHub Actions Maintainer
author: ThreatFlux
description: Pin, update, and report GitHub Actions and cargo dependency versions with optional remote pull request creation.
branding:
  icon: shield
  color: blue

inputs:
  command:
    description: Command to run. Use pin, update, or status.
    required: false
    default: "pin"
  token:
    description: Optional for read-only commands; required for remote pull request creation and recommended to raise API rate limits.
    required: false
    default: ""
  owner:
    description: Repository owner for remote PR creation.
    required: false
    default: ""
  repo-name:
    description: Repository name for remote PR creation.
    required: false
    default: ""
  repo:
    description: Path to the checked-out repository.
    required: false
    default: "."
  workflows-path:
    description: Relative path to the workflow directory.
    required: false
    default: ".github/workflows"
  dry-run:
    description: Show changes without rewriting files.
    required: false
    default: "false"
  github-actions:
    description: Include GitHub Actions workflow updates for update and status commands.
    required: false
    default: "false"
  cargo:
    description: Include cargo package updates for update and status commands.
    required: false
    default: "false"
  all:
    description: Include both GitHub Actions and cargo package updates for update and status commands.
    required: false
    default: "false"
  create-pr:
    description: Create a branch and pull request remotely for update mode.
    required: false
    default: "false"
  base-branch:
    description: Base branch for remote PR creation.
    required: false
    default: ""
  branch-name:
    description: Override branch name for remote PR creation.
    required: false
    default: ""
  labels:
    description: Labels to add to a created pull request.
    required: false
    default: "dependencies"
  title:
    description: Pull request title for remote update mode.
    required: false
    default: "Update dependencies"
  commit-message:
    description: Commit message for remote update mode.
    required: false
    default: "Update dependencies"

runs:
  using: docker
  image: Dockerfile
  args:
    - ${{ inputs.command }}
    - --repo
    - ${{ inputs.repo }}
    - --workflows-path
    - ${{ inputs.workflows-path }}
    - --token
    - ${{ inputs.token }}
    - --owner
    - ${{ inputs.owner }}
    - --repo-name
    - ${{ inputs.repo-name }}
    - --create-pr
    - ${{ inputs.create-pr }}
    - --base-branch
    - ${{ inputs.base-branch }}
    - --branch-name
    - ${{ inputs.branch-name }}
    - --labels
    - ${{ inputs.labels }}
    - --title
    - ${{ inputs.title }}
    - --commit-message
    - ${{ inputs.commit-message }}
    - --dry-run
    - ${{ inputs.dry-run }}
    - --github-actions
    - ${{ inputs.github-actions }}
    - --cargo
    - ${{ inputs.cargo }}
    - --all
    - ${{ inputs.all }}