search

mheap / pin-github-action

Pin your GitHub actions to a specific hash
MIT License
74 stars 7 forks source link

Feature Request: Support authenticated github API requests #161

Closed planetf1 closed 6 months ago

planetf1 commented 6 months ago

When updating the SHAs for ~ 5 files (but trying a few times), I very quickly hit a github rate limit

 pin-github-action .github/workflows/windows.yml
(node:13278) [DEP0040] DeprecationWarning: The `punycode` module is deprecated. Please use a userland alternative instead.
(Use `node --trace-deprecation ...` to show where the warning was created)
Unable to find SHA for actions/checkout@v3
API rate limit exceeded for AAA.BBB.CCC.DDD (But here's the good news: Authenticated requests get a higher rate limit. Check out the documentation for more details.)

This could be mitigated by supporting authenticated github requests

planetf1 commented 6 months ago

Another mitigation: Use a 'vpn' where the source is not subject to the api constraints (seemingly) or at least switch connection - for example cloudflare zero trust

mheap commented 6 months ago

Hey @planetf1 - take a look at the Usage section in the README. Specifically the section on "If you use private actions (or are hitting rate limits), you'll need to provide a GitHub access token"

planetf1 commented 6 months ago

Sincere apologies. I missed that. My bad. Thanks for the quick reply.