Skip to content

Conversation

@joshjohanning
Copy link
Owner

Improvements to script functionality and flexibility:

  • Added support for --resolve-shas and --dedupe-by-repo flags in get-actions-usage-in-organization.sh, allowing users to resolve commit SHAs to tags and count unique repositories per action, respectively. Input validation ensures these flags are only used with the appropriate counting modes. [1] [2]
  • Implemented caching for SHA-to-tag resolution in get-actions-usage-in-organization.sh to improve performance and avoid redundant API calls. Temporary files are cleaned up automatically.
  • Enhanced counting logic to support deduplication by repository and improved version normalization (e.g., converting @4.*.* to @v4 and @4.3.0 to @v4.3.0).

Output and user experience improvements:

  • Added explanatory notes and warnings to script outputs, clarifying how counts are calculated and highlighting repositories that could not be analyzed due to permissions or disabled Dependency Graph. Output formatting for txt, csv, and md is now more consistent and informative.
  • Improved error handling and flag parsing in get-actions-usage-in-repository.sh, including support for the --resolve-shas flag and clear error messages when SBOM data cannot be accessed.

- fixing formatting (@3.%2A.%2A to @V3)
- warning message for repos that don't have Dependency graph enabled
- add --resolve-shas capability for count-by-version
- add --dedupe-by-repo for count-by-action
- added informational notes to help interpret results
- fixing formatting (@3.%2A.%2A to @V3)
- warning message for repos that don't have Dependency graph enabled
- add --resolve-shas capability for count-by-version
@joshjohanning joshjohanning merged commit 5116d47 into main Aug 22, 2025
2 checks passed
@joshjohanning joshjohanning deleted the major-enhancements-to-actions-usage-scripts branch August 22, 2025 21:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants