blob: e0732b123d6d0056ce8d44223d5e68d6333c1b9d [file]
#
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements. See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership. The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License. You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied. See the License for the
# specific language governing permissions and limitations
# under the License.
#
# Main configuration file. We manually add trusted actions here.
# Version updates can be triggered by merging dependabot PRs
# into .github/workflows/dummy-workflow.yml . This will also
# update expiry dates for previous versions.
# Versions that are known to be problematic should be removed explicitly manually.
1Password/load-secrets-action:
92467eb28f72e8255933372f1e0707c567ce2259:
tag: v4.0.0
expires_at: 2026-09-14
3a12b0ab99d9cd590a3e9b5a90ea017210ed9556:
tag: v4.0.1
expires_at: 2026-10-19
eb2efd0703da22a93c467f2d1ffbb6826c11e19c:
tag: v4.1.1
expires_at: 2026-10-30
e544b780808654ba8ceba5fb2fe2897103d92ff4:
tag: v5.0.0
expires_at: 2026-11-30
70062d7a876d3eb6334754fa26efd2fbd90c32f2:
tag: v5.0.1
1Password/load-secrets-action/configure:
92467eb28f72e8255933372f1e0707c567ce2259:
tag: v4.0.0
expires_at: 2026-09-14
3a12b0ab99d9cd590a3e9b5a90ea017210ed9556:
tag: v4.0.1
expires_at: 2026-10-19
eb2efd0703da22a93c467f2d1ffbb6826c11e19c:
tag: v4.1.1
expires_at: 2026-10-28
e544b780808654ba8ceba5fb2fe2897103d92ff4:
tag: v5.0.0
expires_at: 2026-11-19
70062d7a876d3eb6334754fa26efd2fbd90c32f2:
tag: v5.0.1
actions-cool/check-user-permission:
c21884f3dda18dafc2f8b402fe807ccc9ec1aa5e:
tag: v2.4.0
keep: true
addnab/docker-run-action:
4f65fabd2431ebc8d299f8e5a018d79a769ae185:
tag: v3
AdoptOpenJDK/install-jdk:
'*':
keep: true
advanced-security/dismiss-alerts:
046d6b48d2e43cf563f96f67332c47c432eff83e:
tag: v2.0.2
expires_at: 2026-10-02
a18f986bdb40edba0dd7a74382c15d4a3d50a1c8:
tag: v2.0.3
al-cheb/configure-pagefile-action:
9b6da52fb72a3c6147c1aad2df22d8d905681adc:
tag: v1.5
amannn/action-semantic-pull-request:
'*':
keep: true
ana06/get-changed-files:
25f79e676e7ea1868813e21465014798211fad8c:
tag: v2.3.0
anchore/sbom-action:
e22c389904149dbc22b58101806040fa8d37a610:
tag: v0.24.0
expires_at: 2026-12-03
3ad7283483fc7af8ff2b4ea19663c2d5ca935e26:
tag: v0.24.2
anchore/scan-action:
e1165082ffb1fe366ebaf02d8526e7c4989ea9d2:
tag: v7.4.0
expires_at: 2026-11-30
27805bf3b4e84b4a5c980df22ed233c00390a439:
tag: v7.4.2
arduino/setup-protoc:
'*':
keep: true
astral-sh/setup-uv:
fac544c07dec837d0ccb6301d7b5580bf5edae39:
tag: v8.2.0
expires_at: 2026-09-27
d31148d669074a8d0a63714ba94f3201e7020bc3:
tag: v8.3.0
expires_at: 2026-09-29
f98e06938123ccabd21905ea5d0069192241f9f1:
tag: v8.3.1
expires_at: 2026-09-30
11f9893b081a58869d3b5fccaea48c9e9e46f990:
tag: v8.3.2
expires_at: 2026-10-14
c771a70e6277c0a99b617c7a806ffedaca235ff9:
tag: v9.0.0
expires_at: 2026-11-09
20cfd1bf945f4377ade1205e4dbc17946fc9a30d:
tag: v10.0.1
awalsh128/cache-apt-pkgs-action:
'*':
keep: true
aws-actions/configure-aws-credentials:
e7f100cf4c008499ea8adda475de1042d6975c7b:
tag: v6.2.0
expires_at: 2026-09-20
254c19bd240aabef8777f48595e9d2d7b972184b:
tag: v6.2.1
expires_at: 2026-09-30
517a711dbcd0e402f90c77e7e2f81e849156e31d:
tag: v6.2.2
expires_at: 2026-10-16
e6de054238d6b7531b4efff3b6587d9aade6a06c:
tag: v6.2.3
expires_at: 2026-11-30
cbe3b392738ccf3f987d68400dafcf4b0624a56c:
tag: v6.2.4
azure/login:
532459ea530d8321f2fb9bb10d1e0bcf23869a43:
keep: true
tag: v3.0.0
azure/setup-helm:
dda3372f752e03dde6b3237bc9431cdc2f7a02a2:
tag: v5.0.0
expires_at: 2026-09-17
9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310:
tag: v5.0.1
azure/setup-kubectl:
829323503d1be3d00ca8346e5391ca0b07a9ab0d:
tag: v5.1.0
bazel-contrib/setup-bazel:
c5acdfb288317d0b5c0bbd7a396a3dc868bb0f86:
tag: 0.19.0
benchmark-action/github-action-benchmark:
52576c92bccf6ac60c8223ec7eb2565637cae9ba:
tag: v1.22.1
betahuhn/repo-file-sync-action:
8b92be3375cf1d1b0cd579af488a9255572e4619:
tag: v1.21.1
biomejs/setup-biome:
4c91541eaada48f67d7dbd7833600ce162b68f51:
tag: v2.7.1
BobAnkh/auto-generate-changelog:
'*':
keep: true
bufbuild/buf-breaking-action:
'*':
keep: true
bufbuild/buf-lint-action:
'*':
keep: true
bufbuild/buf-setup-action:
'*':
keep: true
burnett01/rsync-deployments:
66257cad6bfeb2171d3b6bfa6c9a22279dd9c3a1:
tag: 8.0.5
expires_at: 2026-09-17
4d419d1dc46d4a8a2b6ceab2f951f0f93b2da8f5:
tag: 9.0.0
expires_at: 2026-11-30
155b6d6c1219ab2224c20c58d423a3f1b850395f:
tag: 9.0.1
burrunan/gradle-cache-action:
'*':
keep: true
carabiner-dev/actions/ampel/verify:
94f29392187fe5082d1195a7d4cae3a7ddf09d9c:
tag: v1.2.1
expires_at: 2026-10-11
2a4b2cd115ede14629b03ef7e77586d3269d4c72:
tag: v1.2.3
expires_at: 2026-10-20
36a39ef667efe7112df8b1a534a4e37f35fad6fd:
tag: v1.2.6
expires_at: 2026-11-17
32587e82f960d49b36101e8c45d1956e511965d3:
tag: v1.2.9
carabiner-dev/actions/install/ampel:
94f29392187fe5082d1195a7d4cae3a7ddf09d9c:
tag: v1.2.1
# transitive: v1.2.3 (2a4b2cd1) pins its internal action refs to this
# untagged commit (carabiner-dev/actions#83). Verified carabiner release-bot commit.
expires_at: 2026-10-11
619a474b2178d06ccf274349397cd67a7802a4fe:
expires_at: 2026-10-11
2a4b2cd115ede14629b03ef7e77586d3269d4c72:
tag: v1.2.3
expires_at: 2026-10-20
36a39ef667efe7112df8b1a534a4e37f35fad6fd:
tag: v1.2.6
# transitive: ampel/verify @ v1.2.6 (36a39ef6) pins its internal action refs
# to this untagged commit. Verified carabiner release-bot commit, ancestor of
# 36a39ef6.
expires_at: 2026-11-17
2fec8bd8e1dcfdea26080648070b4827f1fa0584:
expires_at: 2026-10-21
32587e82f960d49b36101e8c45d1956e511965d3:
tag: v1.2.9
carabiner-dev/actions/install/ampel-bootstrap:
b60791af41423360b892a1a3cee90cd4e131f381:
expires_at: 2026-09-18
# transitive dep pulled by ampel/verify @ v1.2.0 (e0e3b814); allowlisted
# but not dependabot-tracked (b60791af above stays the live ref).
f882fa9eb795141737eecac4ffb056df5ad14954:
expires_at: 2026-10-11
# transitive dep pulled by install/download-and-verify @ v1.2.1 (f882fa9e);
# completes the v1.2.1 (94f29392) approval so the transitive-failures canary resolves.
94f29392187fe5082d1195a7d4cae3a7ddf09d9c:
tag: v1.2.1
expires_at: 2026-10-05
be6b4fa42fa3a8432416475d74218b9aa51ea527:
expires_at: 2026-10-19
# transitive: referenced by carabiner-dev/actions v1.2.3 internal refs.
# Verified carabiner release-bot commits.
174f1c83779af3d3d7e451b7ead7ba824d0d2aa9:
tag: v1.2.2
expires_at: 2026-10-19
619a474b2178d06ccf274349397cd67a7802a4fe:
expires_at: 2026-10-19
60563b5460a9e4ae9921c0da551b4ddd6059ff45:
expires_at: 2026-10-20
4c23ca5801511c2f0e9dd8c8dd011cab26a46be4:
expires_at: 2026-11-09
# transitive: install/download-and-verify @ 4c23ca58 pins this ref, and
# @ 2fec8bd8 in turn pins 16009dca. Verified carabiner release-bot commits.
2fec8bd8e1dcfdea26080648070b4827f1fa0584:
expires_at: 2026-10-21
16009dca48ac369882d4333f1d15d7cd3a4ded31:
expires_at: 2026-10-21
ade14d87ee05bd60ec9028e3f5f430ee571ac8df:
expires_at: 2026-11-17
833eed5876a6db1dbfd60289611ee40fc12f4fe2:
expires_at: 2026-11-26
3fd22ad1abdd61a2337535c255a04eab3d4b23f1:
expires_at: 2026-12-01
7e009ddcb93ec994a0d078e8ceabc590c65f5e2f:
expires_at: 2026-12-02
3a78164ce274684c2651607612ead1bc00cbe4b4: {}
carabiner-dev/actions/install/bnd:
94f29392187fe5082d1195a7d4cae3a7ddf09d9c:
tag: v1.2.1
# transitive: v1.2.3 (2a4b2cd1) pins its internal action refs to this
# untagged commit (carabiner-dev/actions#83). Verified carabiner release-bot commit.
expires_at: 2026-10-11
619a474b2178d06ccf274349397cd67a7802a4fe:
expires_at: 2026-10-11
2a4b2cd115ede14629b03ef7e77586d3269d4c72:
tag: v1.2.3
expires_at: 2026-10-20
36a39ef667efe7112df8b1a534a4e37f35fad6fd:
tag: v1.2.6
expires_at: 2026-11-17
32587e82f960d49b36101e8c45d1956e511965d3:
tag: v1.2.9
carabiner-dev/actions/install/download-and-verify:
b60791af41423360b892a1a3cee90cd4e131f381:
expires_at: 2026-09-18
# transitive dep pulled by ampel/verify @ v1.2.0 (e0e3b814); allowlisted
# but not dependabot-tracked (b60791af above stays the live ref).
f882fa9eb795141737eecac4ffb056df5ad14954:
expires_at: 2026-10-11
# transitive: referenced by carabiner-dev/actions v1.2.3 internal refs.
# Verified carabiner release-bot commits.
174f1c83779af3d3d7e451b7ead7ba824d0d2aa9:
tag: v1.2.2
expires_at: 2026-10-11
619a474b2178d06ccf274349397cd67a7802a4fe:
expires_at: 2026-10-11
be6b4fa42fa3a8432416475d74218b9aa51ea527:
expires_at: 2026-10-19
60563b5460a9e4ae9921c0da551b4ddd6059ff45:
expires_at: 2026-10-20
4c23ca5801511c2f0e9dd8c8dd011cab26a46be4:
expires_at: 2026-11-09
# transitive: install/{ampel,bnd} @ v1.2.6 (36a39ef6) pin this ref, and
# install/ampel @ 2fec8bd8 in turn pins 16009dca. Verified carabiner
# release-bot commits.
2fec8bd8e1dcfdea26080648070b4827f1fa0584:
expires_at: 2026-10-21
16009dca48ac369882d4333f1d15d7cd3a4ded31:
expires_at: 2026-10-21
ade14d87ee05bd60ec9028e3f5f430ee571ac8df:
expires_at: 2026-11-17
833eed5876a6db1dbfd60289611ee40fc12f4fe2:
expires_at: 2026-11-29
3fd22ad1abdd61a2337535c255a04eab3d4b23f1:
expires_at: 2026-12-01
7e009ddcb93ec994a0d078e8ceabc590c65f5e2f:
expires_at: 2026-12-02
3a78164ce274684c2651607612ead1bc00cbe4b4: {}
carloscastrojumo/github-cherry-pick-action:
503773289f4a459069c832dc628826685b75b4b3:
tag: v1.0.10
carlosperate/arm-none-eabi-gcc-action:
'*':
keep: true
chromaui/action:
'*':
keep: true
cicirello/javadoc-cleanup:
'*':
keep: true
codecov/codecov-action:
'*':
keep: true
codelytv/pr-size-labeler:
'*':
keep: true
commit-check/commit-check-action:
c7245f6139b55db23f92266c2f0ff8429c64de80:
tag: v2.8.0
expires_at: 2026-09-13
60e903b3fb06f5e64580b959f58d5b9406a3e002:
tag: v2.9.0
expires_at: 2026-09-17
0e0ac2f48ed0d43062a4ab46bf74127e27aab58f:
tag: v2.10.0
expires_at: 2026-09-29
a9ee0cfa8e2b0399715e016e1dd4624e08427281:
tag: v2.11.0
expires_at: 2026-10-02
bbb6580f01838e475563514f115ec7ef41c9ddc7:
tag: v2.11.1
expires_at: 2026-10-28
d109324148a73dc758891d1d85924c912dbfd38b:
tag: v2.12.0
expires_at: 2026-11-04
562a184b2b8e583e757b17eb385bc48370f44547:
tag: v2.13.1
expires_at: 2026-11-09
f803083a5bf0867b60d77189bc3810fce2f0e314:
tag: v2.15.0
conda-incubator/setup-miniconda:
'*':
keep: true
container-tools/kind-action:
'*':
keep: true
coursier/cache-action:
95e5b1029b6b86e7bac033ee44a0697d8a527d2d:
tag: v8.1.1
coursier/setup-action:
'*':
keep: true
fd1707a76b027efdfb66ca79318b4d29b72e5a02:
tag: v3.0.0
expires_at: 2026-10-30
63a23764316528a1b627103472030d5a16fc6133:
tag: v3.0.1
expires_at: 2026-11-01
9b7939bf01fd1185ce2babe16135168361bf2c62:
tag: v3.0.2
cpp-linter/cpp-linter-action:
0f6d1b8d7e38b584cbee606eb23d850c217d54f8:
tag: v2.15.1
crate-ci/typos:
'*':
keep: true
crazy-max/ghaction-import-gpg:
2dc316deee8e90f13e1a351ab510b4d5bc0c82cd:
tag: v7.0.0
damccorm/tag-ur-it:
6fa72bbf1a2ea157b533d7e7abeafdb5855dbea5:
dart-lang/setup-dart:
65eb853c7ba17dde3be364c3d2858773e7144260:
tag: v1.7.2
expires_at: 2026-11-01
7654d458321ee25acccccfdb86cd48bd95768ff1:
tag: v1.8.0
expires_at: 2026-11-30
6afc89df92d6eb3834022f73cd65adc8cdfcb92d:
tag: v1.8.1
DavidAnson/markdownlint-cli2-action:
ded1f9488f68a970bc66ea5619e13e9b52e601cd:
tag: v23.2.0
expires_at: 2026-09-27
8de2aa07cae85fd17c0b35642db70cf5495f1d25:
tag: v24.0.0
expires_at: 2026-10-11
6bf21b07787794f89a243495939cd651942aeabe:
tag: v24.1.0
expires_at: 2026-11-01
21c1be1b93ad9ed58fa840aacc3f279cde2a72ff:
tag: v24.2.0
dawidd6/action-download-artifact:
'*':
keep: true
dawidd6/action-send-mail:
42942bc2f8fba4e611b459a018967a6a7c78c68c:
tag: v17
expires_at: 2026-09-19
94de994a9f6fffee200243214e17002e2920bb59:
tag: v18
dependabot/fetch-metadata:
25dd0e34f4fe68f24cc83900b1fe3fe149efef98:
tag: v3.1.0
dlang-community/setup-dlang:
'*':
keep: true
docker/bake-action:
6614cfa25eff9a0b2b2697efb0b6159e7680d584:
tag: v7.2.0
expires_at: 2026-09-24
d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b:
tag: v7.3.0
docker/build-push-action:
f9f3042f7e2789586610d6e8b85c8f03e5195baf:
tag: v7.2.0
expires_at: 2026-09-24
53b7df96c91f9c12dcc8a07bcb9ccacbed38856a:
tag: v7.3.0
docker/login-action:
650006c6eb7dba73a995cc03b0b2d7f5ca915bee:
tag: v4.2.0
expires_at: 2026-09-24
c99871dec2022cc055c062a10cc1a1310835ceb4:
tag: v4.3.0
expires_at: 2026-09-27
af1e73f918a031802d376d3c8bbc3fe56130a9b0:
tag: v4.4.0
expires_at: 2026-10-16
06fb636fac595d6fb4b28a5dfcb21a6f5091859c:
tag: v4.5.0
expires_at: 2026-10-16
abd2ef45e78c5afb21d64d4ca52ee8550d9572c7:
tag: v4.5.1
expires_at: 2026-10-20
371161bbe7024a29a25c5e19bfcbc0804fe9ad2c:
tag: v4.5.2
expires_at: 2026-10-22
dbcb813823bdd20940b903addbd779551569679f:
tag: v4.6.0
docker/metadata-action:
80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9:
tag: v6.1.0
expires_at: 2026-09-24
dc802804100637a589fabce1cb79ff13a1411302:
tag: v6.2.0
docker/setup-buildx-action:
d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5:
tag: v4.1.0
expires_at: 2026-09-24
bb05f3f5519dd87d3ba754cc423b652a5edd6d2c:
tag: v4.2.0
expires_at: 2026-11-19
37fe631027851001ddb9b187196cc803df7f5f0e:
tag: v4.3.0
docker/setup-qemu-action:
06116385d9baf250c9f4dcb4858b16962ea869c3:
tag: v4.1.0
expires_at: 2026-09-24
96fe6ef7f33517b61c61be40b68a1882f3264fb8:
tag: v4.2.0
expires_at: 2026-11-30
1f40c72289eff860ee54a304f1438e3cff362e0a:
tag: v4.3.0
docker://jekyll/jekyll:
sha256:400b8d1569f118bca8a3a09a25f32803b00a55d1ea241feaf5f904d66ca9c625:
docker://pandoc/core:
sha256:48e15e83db0df6fb39b24adb0210ecbde85003a3a8139d526e29c98f95ac0a93:
tag: 3.7.0.2
dorny/paths-filter:
fbd0ab8f3e69293af611ebaee6363fc25e6d187d:
tag: v4.0.1
expires_at: 2026-09-27
7b450fff21473bca461d4b92ce414b9d0420d706:
tag: v4.0.2
expires_at: 2026-11-01
ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d:
tag: v4.0.3
dorny/test-reporter:
a43b3a5f7366b97d083190328d2c652e1a8b6aa2:
tag: v3.0.0
dtolnay/rust-toolchain:
# Deliberately carries no `tag:` annotation. Upstream publishes `stable` as a
# rolling branch that is force-pushed on each toolchain release, so a SHA
# annotated with it stops being an ancestor of that branch and makes
# check_action_tags hard-fail every PR in this repo, not just ones touching
# this entry. The commit itself is immutable and still valid to pin; moving
# to whatever `stable` points at now is a version bump and needs its own
# review rather than being smuggled in as a CI fix.
4cda84d5c5c54efe2404f9d843567869ab1699d4:
keep: true
easimon/maximize-build-space:
'*':
keep: true
editorconfig-checker/action-editorconfig-checker:
840e866d93b8e032123c23bac69dece044d4d84c:
tag: v2.2.0
expires_at: 2026-11-30
51f63319f592f97930c73d9c46184d20bd206393:
tag: v3.0.0
EnricoMi/publish-unit-test-result-action:
'*':
keep: true
eps1lon/actions-label-merge-conflict:
'*':
keep: true
erisu/apache-rat-action:
30c94d10ed21e6f6fd5590dc5c158f58cae7a0dd:
tag: v3.0.0
erisu/license-checker-action:
04511f4c052b5773f11e1c65b42cda88235c62ae:
tag: v2.1.0
erlef/setup-beam:
fc68ffb90438ef2936bbb3251622353b3dcb2f93:
tag: v1.24.0
expires_at: 2026-09-28
54075bcc5e249e4758d363f27d099f55d843f124:
tag: v1.24.1
geekyeggo/delete-artifact:
'*':
keep: true
golangci/*:
'*':
keep: true
golangci/golangci-lint-action:
82606bf257cbaff209d206a39f5134f0cfbfd2ee:
tag: v9.2.1
expires_at: 2026-09-23
ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a:
tag: v9.3.0
google-github-actions/auth:
7c6bc770dae815cd3e89ee6cdf493a5fab2cc093:
tag: v3.0.0
google-github-actions/setup-gcloud:
aa5489c8933f4cc7a4f7d45035b3b1440c9c10db:
tag: v3.0.1
goreleaser/goreleaser-action:
5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89:
tag: v7.2.2
expires_at: 2026-09-21
f06c13b6b1a9625abc9e6e439d9c05a8f2190e94:
tag: v7.2.3
gr2m/twitter-together:
'*':
keep: true
graalvm/setup-graalvm:
329c42c5f4c343bceb505f0b28cc8499bc2bf174:
tag: v1.5.4
expires_at: 2026-09-13
6f3fa030c4b8f77c1f554a860f593a654538fa38:
tag: v1.5.6
expires_at: 2026-09-27
cabbb10818fabc989d6dbd508e4846596d20dd2d:
tag: v1.6.0
expires_at: 2026-09-29
8c5543b71f44568342e106336639979e94a8f6de:
tag: v1.6.1
expires_at: 2026-09-30
186d0493a2df5eb62df5ecc498883d18fd58c303:
tag: v1.6.2
expires_at: 2026-10-08
0def53c0fd8534bc13416c9469f5be45265824fd:
tag: v1.6.3
expires_at: 2026-11-04
5298d94fb55a4f185c602eeac5de1b553882abe2:
tag: v1.6.4
expires_at: 2026-11-30
0426e2e191540e8514dff98dc52a5f5146a2a276:
tag: v1.6.6
gradle/actions/dependency-submission:
3f131e8634966bd73d06cc69884922b02e6faf92:
tag: v6.2.0
expires_at: 2026-11-01
9c971963bec38e04b3d30dcc455b5382be2fdbfb:
tag: v6.3.0
gradle/actions/setup-gradle:
0723195856401067f7a2779048b490ace7a47d7c:
tag: v5.0.2
# Projects have deliberately chosen to not use v6 of the setup-gradle action due to licensing model changes.
# See https://github.com/apache/infrastructure-actions/pull/953
keep: true
3f131e8634966bd73d06cc69884922b02e6faf92:
tag: v6.2.0
expires_at: 2026-10-30
9c971963bec38e04b3d30dcc455b5382be2fdbfb:
tag: v6.3.0
gradle/actions/wrapper-validation:
3f131e8634966bd73d06cc69884922b02e6faf92:
tag: v6.2.0
expires_at: 2026-10-30
9c971963bec38e04b3d30dcc455b5382be2fdbfb:
tag: v6.3.0
gradle/develocity-actions/maven-publish-build-scan:
974e8dbcbda40db6828fc35f349c80a7c0e71529:
tag: v2.1
expires_at: 2026-09-13
0e1f30c14ab56d0c1ecf229a0ffc3eb3e40e4642:
tag: v2.2
expires_at: 2026-11-30
4b276bd81fb55e2fcbae724c48699de57e2156eb:
tag: v2.3
gradle/develocity-actions/setup-maven:
974e8dbcbda40db6828fc35f349c80a7c0e71529:
tag: v2.1
expires_at: 2026-09-13
0e1f30c14ab56d0c1ecf229a0ffc3eb3e40e4642:
tag: v2.2
expires_at: 2026-11-30
4b276bd81fb55e2fcbae724c48699de57e2156eb:
tag: v2.3
hadolint/hadolint-action:
2332a7b74a6de0dda2e2221d575162eba76ba5e5:
tag: v3.3.0
expires_at: 2026-10-25
2a66e89f53d0771bb131a7fa31f3136336094aa6:
tag: v3.4.0
expires_at: 2026-11-19
06be81baf89a55ffd0e24b8f04a4185738dd3387:
tag: v3.5.0
hashicorp/setup-terraform:
dfe3c3f87815947d99a8997f908cb6525fc44e9e:
tag: v4.0.1
helm/chart-releaser-action:
cae68fefc6b5f367a0275617c9f83181ba54714f:
tag: v1.7.0
helm/chart-testing-action:
6ec842c01de15ebb84c8627d2744a0c2f2755c9f:
tag: v2.8.0
helm/kind-action:
ef37e7f390d99f746eb8b610417061a60e82a6cc:
tag: v1.14.0
expires_at: 2026-11-30
06c1ae10762d3b9c1644e7fe69596ae519e015a2:
tag: v1.15.0
houseabsolute/actions-rust-cross:
'*':
keep: true
ilammy/msvc-dev-cmd:
'*':
keep: true
ilammy/setup-nasm:
72793074d3c8cdda771dba85f6deafe00623038b:
tag: v1.5.2
italia/publiccode-parser-action:
21086c73ec0563e14c6748787efa1b34b025ad8c:
tag: v1.5.1
expires_at: 2026-11-09
0deab88c3f094aa12c5826e52ac2c4f176446821:
tag: v1.6.0
j178/prek-action:
bdca6f102f98e2b4c7029491a53dfd366469e33d:
tag: v2.0.4
expires_at: 2026-09-23
e98a699c41eb69ab013a45817a0406469a748f8d:
tag: v2.0.5
expires_at: 2026-10-11
5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16:
tag: v2.0.6
expires_at: 2026-10-22
4e14d07f9231acabce116ccfca13b13dd9755ece:
tag: v3.0.0
JamesIves/github-pages-deploy-action:
d92aa235d04922e8f08b40ce78cc5442fcfbfa2f:
tag: v4.8.0
expires_at: 2026-11-30
fa24774553152dd7873cd16ebd8d959b010c5445:
tag: v4.9.0
jasonetco/create-an-issue:
1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5:
tag: v2
jdx/mise-action:
5228313ee0372e111a38da051671ca30fc5a96db:
keep: true
7e36c90d9ab29c415a2384db3006f3ec8a8cc654:
tag: v4.2.4
expires_at: 2026-12-01
c2a87611a18de5b3828c5652fe268e992400cb5c:
tag: v4.3.0
JetBrains/qodana-action:
d7b5ec2fbec32197ef447c450e00589ed5f34fd5:
tag: v2026.1.0
expires_at: 2026-09-25
4861e015da555e86a72b862892aba6c2b93e6891:
tag: v2026.1.3
expires_at: 2026-10-22
b588768b6e7e6da579e518bc584f79de0d243692:
tag: v2026.2.0
expires_at: 2026-11-30
10be11607eb323a180e2b76b26c9c5cdceac3e77:
tag: v2026.2.1
jidicula/clang-format-action:
'*':
keep: true
Jimver/cuda-toolkit:
3d45d157f327c09c04b50ee6ccdea2d9d017ec76:
tag: v0.2.35
expires_at: 2026-11-01
b8bf9c6c28f8a92fbb04dcfcaee872e60c57462d:
tag: v0.2.36
jlumbroso/free-disk-space:
'*':
keep: true
jrouly/scalafmt-native-action:
'*':
keep: true
a9c8e1032a02004c425d53ef8ce420fe2179eba7:
tag: v5
julia-actions/julia-buildpkg:
'*':
keep: true
julia-actions/julia-docdeploy:
'*':
keep: true
julia-actions/julia-processcoverage:
'*':
keep: true
julia-actions/julia-runtest:
'*':
keep: true
julia-actions/setup-julia:
'*':
keep: true
juliaregistries/tagbot:
'*':
keep: true
JustinBeckwith/linkinator-action:
7b6b0bc671f6264e1a8daa4488a5bd91ce61dcd4:
tag: v2.4.2
expires_at: 2026-10-16
36a0bfbfecd5e237e8f8531537a693616c505faf:
tag: v2.4.5
expires_at: 2026-11-30
12f7a61a56e5e75d659f0dfd6357e2d852ede281:
tag: v2.5.0
jwgmeligmeyling/checkstyle-github-action:
'*':
keep: true
jwgmeligmeyling/pmd-github-action:
322e346bd76a0757c4d54ff9209e245965aa066d:
tag: v1.2
jwgmeligmeyling/spotbugs-github-action:
'*':
keep: true
Kesin11/actions-timeline:
44c9c178ffb2fb1d9859614a3ffa79ccfb77565e:
tag: v3.1.0
expires_at: 2026-09-24
7bf79990b7c09f5dfb570ac30b814ca597bd538e:
tag: v3.1.1
expires_at: 2026-10-28
57fc93f20c6da7fbc14063c6d24a2a5627c799ad:
tag: v3.2.0
kiegroup/github-action-build-chain:
'*':
keep: true
korandoru/hawkeye:
'*':
keep: true
leafo/gh-actions-lua:
'*':
keep: true
leafo/gh-actions-luarocks:
35d062def313a7699a0d513e996bcf4352f05389:
tag: v6.1.0
lhotari/sandboxed-trivy-action:
f01374b6cc3bf7264ab238293e94f6db7ada6dd0:
tag: v1.0.2
lycheeverse/lychee-action:
8646ba30535128ac92d33dfc9133794bfdd9b411:
tag: v2.8.0
expires_at: 2026-10-02
e7477775783ea5526144ba13e8db5eec57747ce8:
tag: v2.9.0
manusa/actions-setup-minikube:
'*':
keep: true
b65276017fdec6f1e6498129fb740e34e260dc55:
tag: v2.18.0
matlab-actions/run-tests:
ae0e80cb44fdec28d35d0831d8acf38ee4fdf91a:
tag: v3.2.0
expires_at: 2026-10-28
83e368e0b18d9c0c7d510fd911d546e16b73bbdb:
tag: v3.2.1
expires_at: 2026-11-09
214a16e600ef2c705a4b2dd6c0794dc6957682a9:
tag: v3.3.0
matlab-actions/setup-matlab:
a0180c939fb1a28de13f44f7b778b912384ced1f:
tag: v3.0.1
expires_at: 2026-10-28
2323adb8243827ea460b0def4c413545aaec46a9:
tag: v3.0.2
expires_at: 2026-11-29
f9e43010f1ae678f7cfa0542fe2a4f60f7d1ad8d:
tag: v3.1.0
maxim-lobanov/setup-xcode:
'*':
keep: true
medyagh/setup-minikube:
'*':
keep: true
mikepenz/action-junit-report:
'*':
keep: true
mlugg/setup-zig:
d1434d08867e3ee9daa34448df10607b98908d29:
tag: v2.2.1
mozilla-actions/sccache-action:
9e7fa8a12102821edf02ca5dbea1acd0f89a2696:
tag: v0.0.10
expires_at: 2026-10-22
fc920bf0ec8de6ee65d409111f7ec508035751ba:
tag: v0.0.11
msys2/setup-msys2:
'*':
keep: true
nanasess/setup-chromedriver:
'*':
keep: true
ncipollo/release-action:
339a81892b84b4eeb0f6e744e4574d79d0d9b8dd:
tag: v1.21.0
nick-fields/retry:
'*':
keep: true
NuGet/login:
8d196754b4036150537f80ac539e15c2f1028841:
tag: v1.2.0
nwtgck/actions-netlify:
4cbaf4c08f1a7bfa537d6113472ef4424e4eb654:
tag: v3.0.0
expires_at: 2026-09-14
d22a32a27c918fe470bbc562e984f80ec48c2668:
tag: v4.0.0
ocaml/setup-ocaml:
'*':
keep: true
olafurpg/setup-scala:
'*':
keep: true
opentofu/setup-opentofu:
847eaa4afeb791b06daa46e8eafa8b1b68d7cfb4:
tag: v2.0.1
expires_at: 2026-09-24
a1320f892987e89d278cc92dc5adc984fb93aca4:
tag: v2.0.2
oracle-actions/setup-java:
'*':
keep: true
orhun/git-cliff-action:
f50e11560dce63f7c33227798f90b924471a88b5:
tag: v4.8.0
expires_at: 2026-11-30
3d96a18cc4ec17e9dc69ddcc424ccafaf1f78ce2:
tag: v4.9.0
ossf/scorecard-action:
'*':
keep: true
peaceiris/actions-gh-pages:
'*':
keep: true
peaceiris/actions-hugo:
'*':
keep: true
peaceiris/actions-mdbook:
'*':
keep: true
peter-evans/create-or-update-comment:
e8674b075228eee787fea43ef493e45ece1004c9:
tag: v5.0.0
peter-evans/create-pull-request:
'*':
keep: true
phoenix-actions/test-reporting:
7317eea6e13c47348dd0bb318669485157c518d6:
tag: v16
pnpm/action-setup:
0977fd99725f1db4007ccb2928dbb4e90d06cc86:
tag: v6.0.10
expires_at: 2026-12-01
ea17c68df8912ef543352723c149a84f56e3d413:
tag: v6.1.0
posit-dev/setup-air:
cf390573ff4fe0f198f35df3a642b1409328d859:
tag: v1.0.1
potiuk/cancel-workflow-runs:
'*':
keep: true
pre-commit/action:
2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd:
tag: v3.0.1
PyO3/maturin-action:
'*':
keep: true
pypa/cibuildwheel:
294735312765b09d24a2fbec22660ce817587d55:
tag: v4.1.0
expires_at: 2026-10-19
4726cd35bb13f7bde50cf2761f2499ac7b3aa32c:
tag: v4.1.1
expires_at: 2026-11-01
1828c10ab37f080699c7b81cea34097c684a7074:
tag: v4.2.0
expires_at: 2026-12-01
e090b81e30c4d855ea63bf4b6e59204c09a101ae:
tag: v4.2.1
pypa/gh-action-pip-audit:
1220774d901786e6f652ae159f7b6bc8fea6d266:
tag: v1.1.0
pypa/gh-action-pypi-publish:
ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e:
tag: v1.13.0
expires_at: 2026-10-25
dc37677b2e1c63e2034f94d8a5b11f265b73ba33:
tag: v1.14.2
pyTooling/Actions:
'*':
keep: true
pytooling/actions:
'*':
keep: true
pytooling/actions/with-post-step:
'*':
keep: true
quarto-dev/quarto-actions:
'*':
keep: true
quarto-dev/quarto-actions/*:
'*':
keep: true
r-lib/actions/*:
'*':
keep: true
reactivecircus/android-emulator-runner:
a421e43855164a8197daf9d8d40fe71c6996bb0d:
tag: v2.38.0
readthedocs/actions:
'*':
keep: true
readthedocs/actions/preview:
'*':
keep: true
release-drafter/release-drafter:
'*':
keep: true
ruby/setup-ruby:
'*':
keep: true
rubygems/configure-rubygems-credentials:
dc5a8d8553e6ee01fc26761a49e99e733d17954a:
tag: v2.1.0
rubygems/release-gem:
f0d7faff26625599a847d40d9fa28ace24c2aacc:
tag: v1.3.0
expires_at: 2026-09-14
052cc82692552de3ef2b81fd670e41d13cba8092:
tag: v1.4.0
expires_at: 2026-11-09
7f9650160c1a4e7989fdc9855807bdbd421d8b6b:
tag: v1.4.1
runs-on/action:
d141ef83eb66d096ce8afc767e09115a65c63b60:
tag: v2.1.2
expires_at: 2026-09-24
4e5f72399b6b17f2e79c511c1b38a315a64d22dc:
tag: v2.2.0
expires_at: 2026-11-01
46910bf61b41721b0579f237e186afb35477007a:
tag: v2.3.0
expires_at: 2026-11-30
efac073ea2507ec18797de3a81704201ade11d9d:
tag: v2.3.1
rust-lang/crates-io-auth-action:
bbd81622f20ce9e2dd9622e3218b975523e45bbe:
tag: v1.0.4
expires_at: 2026-09-13
c6f97d42243bad5fab37ca0427f495c86d5b1a18:
tag: v1.0.5
rustsec/*:
'*':
keep: true
sbt/setup-sbt:
af116cce31c00823d3903ce687f9cda3a4f19f1b:
tag: v1.2.1
expires_at: 2026-09-13
3afe9cf056c5d139bfc46579af1192d77a2f0821:
tag: v1.4.0
expires_at: 2026-09-24
66fb4376e81982c7d92a4074170846fff88e2e30:
tag: v1.5.0
expires_at: 2026-10-08
9d56cf12e9b58d219605e1d8bfe69a8395fedde0:
tag: v1.5.1
expires_at: 2026-10-12
6444f4c8111de4b9059c3975def104b03cfaa5f0:
tag: v1.5.2
expires_at: 2026-10-19
f6db8ab474efba716fc7f04441ab33714e4825af:
tag: v1.5.4
expires_at: 2026-10-20
d059c39de700f4cc5cb64f9f56577315e44a984e:
tag: v1.5.5
expires_at: 2026-10-22
bfea3c5f48abd221b04a6df4798aa5eb8b6a2baf:
tag: v1.5.6
expires_at: 2026-11-03
8feba82adc7f01ddcf8165b86f778bdb5b82cebc:
tag: v1.5.7
expires_at: 2026-11-17
c7d2d6258b4bd0d3ec5129e6b3453199d3c79729:
tag: v1.5.8
scalacenter/sbt-dependency-submission:
d84eef4c09e633bcf5f113bcad7fd5e9af1baee9:
tag: v3.2.3
scottbrenner/puppet-lint-action:
'*':
keep: true
securego/gosec:
'*':
keep: true
shivammathur/setup-php:
'*':
keep: true
shogo82148/actions-setup-perl:
'*':
keep: true
sigstore/cosign-installer:
faadad0cce49287aee09b3a48701e75088a2c6ad:
expires_at: 2026-12-31
tag: v4.0.0
slackapi/slack-github-action:
45a88b9581bfab2566dc881e2cd66d334e621e2c:
tag: v3.0.3
expires_at: 2026-10-03
0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc:
tag: v3.0.5
expires_at: 2026-10-09
dcb1066f776dd043e64d0e8ba94ca15cc7e1875d:
tag: v4.0.0
slsa-framework/actions:
dea965cdca5e0cb422bf7b2653c9d15f678ad01c:
expires_at: 2026-12-31
tag: v0.1.0
snok/install-poetry:
a783c322200f0519c7926aa6faa857c4e23e9263:
tag: v1
softprops/action-gh-release:
'*':
keep: true
SonarSource/sonarqube-scan-action:
713881670b6b3676cda39549040e2d88c70d582e:
tag: v8.2.0
expires_at: 2026-10-08
22918119ff8e1ca75a623e15c8296b6ea4fbe28f:
tag: v8.2.1
SonarSource/sonarqube-scan-action/install-build-wrapper:
713881670b6b3676cda39549040e2d88c70d582e:
tag: v8.2.0
expires_at: 2026-10-08
22918119ff8e1ca75a623e15c8296b6ea4fbe28f:
tag: v8.2.1
stCarolas/setup-maven:
'*':
keep: true
subosito/flutter-action:
'*':
keep: true
swatinem/rust-cache:
'*':
keep: true
swift-actions/setup-swift:
'*':
keep: true
taiki-e/install-action:
'*':
keep: true
tcort/github-action-markdown-link-check:
e7c7a18363c842693fadde5d41a3bd3573a7a225:
tag: v1.1.2
expires_at: 2026-10-20
e047c5b37f24ab722bbef1a27b6fab7f96bc4068:
tag: v1.1.3
terraform-linters/setup-tflint:
b480b8fcdaa6f2c577f8e4fa799e89e756bb7c93:
tag: v6.2.2
expires_at: 2026-09-23
6e1e0642c0289bd619021bf6b34e3c08ed1e005a:
tag: v6.3.0
expires_at: 2026-11-30
1cf010d3c7aef302051ccdb68c14c5dc2efa34ef:
tag: v6.3.1
test-summary/action:
'*':
keep: true
testlens-app/setup-testlens:
'*':
keep: true
TobKed/label-when-approved-action:
'*':
keep: true
untitaker/hyperlink:
fb5bb9c5011a3d143a54b4b30aedc30ec5bc0f89:
tag: 0.2.0
expires_at: 2026-09-21
9375bc4063712ad490d5eb3d54df0b6aade15e54:
tag: 0.3.2
uraimo/run-on-arch-action:
f9b26e3a1a408d5fd530d20c17b9f3f4428ff8d9:
tag: v3.1.0
expires_at: 2026-11-30
460cb8e6d9f726a588fc9b5e681c8a6cab09ae41:
tag: v3.2.0
vapier/coverity-scan-action:
2068473c7bdf8c2fb984a6a40ae76ee7facd7a85:
tag: v1.8.0
expires_at: 2026-11-04
1b6fd4eaba6651aa354c9ea7f48caa1710b4e12e:
tag: v1.9.0
expires_at: 2026-11-09
8fe7b0af23cbbd4eced5f63dcd2384640eaa5d49:
tag: v1.10.0
vimtor/action-zip:
5f1c4aa587ea41db1110df6a99981dbe19cee310:
tag: v1
vishalsinha21/dynamic-checklist:
'*':
keep: true
zizmorcore/zizmor-action:
5f14fd08f7cf1cb1609c1e344975f152c7ee938d:
tag: v0.5.6
expires_at: 2026-09-14
192e21d79ab29983730a13d1382995c2307fbcaa:
tag: v0.5.7
expires_at: 2026-10-09
6599ee8b7a49aef6a770f63d261d214911a7ce02:
tag: v0.6.0
expires_at: 2026-10-24
6fc4b006235f201fdab3722e17240ab420d580e5:
tag: v0.6.1
expires_at: 2026-10-27
3dc1ecc9bcb9e94e9b2c709687979e1298497054:
tag: v0.6.2
expires_at: 2026-11-26
70fb788f84895a7701f5643d103d587e460b5c99:
tag: v0.6.3