diff --git a/README.md b/README.md index 584a6b1..c2217f9 100644 --- a/README.md +++ b/README.md @@ -18,7 +18,7 @@ jobs: + name: Prereqs + runs-on: ubuntu-24.04 + steps: -+ - uses: StyraInc/styra-init-action@main ++ - uses: StyraOSS/styra-init-action@main lint: name: Analysis & Linting diff --git a/action.yml b/action.yml index 638fe6b..5b062e4 100644 --- a/action.yml +++ b/action.yml @@ -1,4 +1,4 @@ -name: 'Styra Init Action' +name: "Styra Init Action" description: | This action runs prerequisite checks to ensure that common (pre)requirements are met. inputs: {} @@ -13,6 +13,8 @@ runs: env: GITHUB_TOKEN: ${{ github.token }} - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + with: + persist-credentials: false - name: Run Conftest shell: bash run: | @@ -20,4 +22,4 @@ runs: mise use -g conftest@0.58.0 conftest test -o github -p "${{ github.action_path }}/policies" $WORKFLOW env: - WORKFLOW_REF: ${{ github.workflow_ref }} + WORKFLOW_REF: ${{ github.workflow_ref }} diff --git a/policies/actions.rego b/policies/actions.rego index ce4c676..d0fcd7b 100644 --- a/policies/actions.rego +++ b/policies/actions.rego @@ -2,7 +2,7 @@ package main import rego.v1 -self := "StyraInc/styra-init-action" +self := "StyraOSS/styra-init-action" init_job := id if { some id, job in input.jobs @@ -19,7 +19,7 @@ deny contains "workflow does not use init action" if not init_job deny contains msg if { some [name, ref] in actions not is_sha_hash(ref) - lower(name) != "styrainc/styra-init-action" # the only exception, this action itself + lower(name) != "styraoss/styra-init-action" # the only exception, this action itself msg := sprintf("action %s uses tag %s, should be pinned to SHA hash", [name, ref]) }