Approved Github Actions

List & Process

Moved to GH Project. Please, request new GH Actions creating GH Draft Issues in that Project.

Review process

The following is a list to identify red flags/smells in order to approve or help select among different Actions providing similar functionality:

• Contributors: ideally >1.
• Stars: ideally > 10.
• Dependants (e.g: https://github.com/<action_owner>/<action_repo>/network/dependents): ideally >1000.
• Code Review: no obfuscated code (base64)
• Code Review: no handling of Github Token or other secrets (printing to logs, writing to disk, HTTP requests).
• Code Review: no dependencies (besides Github SDK/API), OR (dependencies are SHA-1 pinned and those dependencies don't install further deps) (e.g.: 🚩 a GH Action installs some external dependency via a SHA1-pinned script, but that script in turn installs an unpinned dependency)