Install just via curl instead of extractions/setup-just#377
Open
sroomberg-ep wants to merge 1 commit into
Open
Install just via curl instead of extractions/setup-just#377sroomberg-ep wants to merge 1 commit into
sroomberg-ep wants to merge 1 commit into
Conversation
Replaces the unverified third-party extractions/setup-just action with a run step that downloads the prebuilt just binary from its GitHub release. This repo is public and cannot consume the private EasyPost/ep-actions composite action, and there is no verified-publisher action for just. Resolves the latest release tag via the github.com redirect (avoids api.github.com rate limits on shared runner IPs), downloads the correct asset per RUNNER_OS (Linux/macOS/Windows), extracts into $RUNNER_TEMP, and adds it to $GITHUB_PATH so later steps in any shell can find it.
sroomberg-ep
force-pushed
the
chore/install-just-via-curl
branch
from
592a754 to
b98890f
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Replaces the unverified third-party action
extractions/setup-justwith arunstep that installsjustdirectly from the official installer athttps://just.systems/install.sh.Why
extractions/setup-justis from an unverified publisher and is not on the approved list inEasyPost/ep-actions/ApprovedThirdPartyActions.yaml.EasyPost/ep-actionscomposite action (GitHub does not allow public repos to reference actions in private repos).just.Installing via the official script removes the third-party action dependency entirely.
How
shell: bashensures it also runs on Windows runners (where applicable).