nowsecure appears prominently in the marketplace:
https://github.com/marketplace?query=nowsecure
There's no need to list an action on the marketplace unless you're:
- Supporting it
- Looking for more consumers
Anyone can use any public github.com repository as an action source regardless of whether it is published to the marketplace (including from another action, such as your sbom action).
This action doesn't work anywhere close to out of the box
Using the standard use latest version button
yields: https://github.com/check-spelling-sandbox/stunning-bassoon/actions/runs/13559420392
❌ Can't find 'action.yml', 'action.yaml' or 'Dockerfile' for action 'nowsecure/nowsecure-action@v4'.
The advertisement prose hints at problems
|
> Note: The version listed on the Marketplace is old. Please refer to the "Releases" tab on the GitHub page for more information. |
If you try to follow getting started
|
### For a New Workflow |
|
|
|
For the easiest setup, see the [example annotated workflow](../workflows/basic.yml). |
points to https://github.com/nowsecure/nowsecure-action/blob/901b53b55dfe9d9813e280078163629a04117269/workflows/basic.yml
you get https://github.com/check-spelling-sandbox/stunning-bassoon/actions/runs/13559514587
❌ This request has been automatically failed because it uses a deprecated version of actions/upload-artifact: v2. Learn more: https://github.blog/changelog/2024-02-13-deprecation-notice-v1-and-v2-of-the-artifact-actions/
There's no reason to continue advertising an action that people can't set up based on the available documentation.
nowsecure appears prominently in the marketplace:
https://github.com/marketplace?query=nowsecure
There's no need to list an action on the marketplace unless you're:
Anyone can use any public github.com repository as an action source regardless of whether it is published to the marketplace (including from another action, such as your sbom action).
This action doesn't work anywhere close to out of the box
Using the standard use latest version button
yields: https://github.com/check-spelling-sandbox/stunning-bassoon/actions/runs/13559420392
The advertisement prose hints at problems
nowsecure-action/README.md
Line 5 in 901b53b
If you try to follow getting started
nowsecure-action/docs/getting-started.md
Lines 17 to 19 in 901b53b
points to https://github.com/nowsecure/nowsecure-action/blob/901b53b55dfe9d9813e280078163629a04117269/workflows/basic.yml
you get https://github.com/check-spelling-sandbox/stunning-bassoon/actions/runs/13559514587
There's no reason to continue advertising an action that people can't set up based on the available documentation.