PMD GitHub Action not allowed

[chandrahasareddy73]

Hi,

Can you please help me on below error, while running PMD, it's getting failed with below error.
The action pmd/pmd-github-action@v2 is not allowed in user/GitHubActions

Script:
name: PMD Check
on:
pull_request:
branches: [ QA ] # Only run for PRs targeting OrgSource
jobs:
pmd:
runs-on: ubuntu-latest
permissions: read-all
steps:
- uses: actions/checkout@v2
- name: Run PMD
uses: pmd/pmd-github-action@v2
with:
rulesets: 'config/ruleset.xml' # Adjust path if your ruleset.xml is elsewhere
sourcePath: 'force-app/main/default'
version: latest
analyzeModifiedFilesOnly: true
createGitHubAnnotations: true
uploadSarifReport: false

[adangel]

Seems like you need to allow actions, see https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#allowing-select-actions-and-reusable-workflows-to-run

Please note, that actions/checkout@v2 is very old, you should use the latest version.

[chandrahasareddy73]

Thanks @adangel for your response, I tried to update latest actions, but still getting below error. Can you please help me to correct the script.

Error
The action pmd/pmd-github-action@v3 is not allowed in chandrahasareddy73/GitHubActions because all actions must be from a repository owned by chandrahasareddy73, created by GitHub, or verified in the GitHub Marketplace.

Script:
name: PMD Check
on:
pull_request:
branches: [ QA ] # Only run for PRs targeting OrgSource
jobs:
pmd:
runs-on: ubuntu-latest
permissions: read-all
steps:
- uses: actions/checkout@v5
- name: Run PMD
uses: pmd/pmd-github-action@v3

    with:
      token: ${{ secrets.CUSTOM_GITHUB_TOKEN }}
      rulesets: 'config/ruleset.xml' # Adjust path if your ruleset.xml is elsewhere
      sourcePath: 'force-app/main/default'
      version: latest
      analyzeModifiedFilesOnly: true
      createGitHubAnnotations: true
      uploadSarifReport: false

FYI,

I Should use 3 OR 4 option for my project.

[adangel]

As you can see on https://github.com/marketplace/actions/pmd there is no badge indicating the pmd is a verified creator on github's marketplace. So you'll need to explicitly whitelist the action if you want to use it.

Also note: there is no pmd/pmd-github-action@v3 - latest version is 2.0.0, as you can see here: https://github.com/pmd/pmd-github-action/releases

In order to allow pmd-github-action, you need to enter pmd/pmd-github-action@v2 into the textarea labelled "Allow or block specified actions and reusable workflows".

Also note: the latest version of action/checkout is not 5 but 6, see https://github.com/actions/checkout/releases

[chandrahasareddy73]

Thanks a lot @adangel and it's working after followed above your answer.