Open alek-w opened 2 years ago
@alexarchambault Would you be up for this? 🙏🏻
Many orgs require actions from verified publishers, i.e: https://docs.github.com/en/enterprise-cloud@latest/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#allowing-select-actions-and-reusable-workflows-to-run
Looking into it, it seems this requires that the organization has GitHub apps (different from actions IIUC) or OAuth apps.
@alexarchambault GitHub apps are just like service accounts. You can create one without publishing it anywhere just to satisfy this requirement (if it's still necessary). Could you check it again? https://github.com/organizations/coursier/settings/publisher
Scalacenter is an example of a verified publisher https://github.com/marketplace/actions/sbt-dependency-submission and they don't have any apps in the marketplace
Why coursier/setup-action Github Action is not certified by GitHub ?
could it help? https://docs.github.com/en/developers/github-marketplace/github-marketplace-overview/applying-for-publisher-verification-for-your-organization