search

jenkins-infra / jenkins-security-scan

GitHub Workflow and Action for the Jenkins Security Scan
MIT License
1 stars 6 forks source link

action.yml in project root possible? #2

Closed offa closed 2 years ago

offa commented 2 years ago

Would it be possible to shorten the uses: to uses: jenkins-infra/jenkins-security-scan@v1, eg. by moving the action.yml to the project root?

Thanks to copy & paste it's not a big deal, but Actions are more usable without the need to remember full paths – <user>/<repo>@<version> is easy to use.

daniel-beck commented 2 years ago

Yeah, this is annoying, but GitHub explicitly documents it as such:

Reusable workflows are YAML-formatted files, very similar to any other workflow file. As with other workflow files, you locate reusable workflows in the .github/workflows directory of a repository. Subdirectories of the workflows directory are not supported.

Note that what you're using from the starter workflow is a full workflow, not just an action.

offa commented 2 years ago

I see, seems I mixed Actions and reusable workflows.