Install just via curl instead of extractions/setup-just#226
Closed
sroomberg-ep wants to merge 1 commit into
Closed
Install just via curl instead of extractions/setup-just#226sroomberg-ep wants to merge 1 commit into
sroomberg-ep wants to merge 1 commit into
Conversation
Replaces the unverified third-party extractions/setup-just action with a run step that downloads the prebuilt just binary from its GitHub release. This repo is public and cannot consume the private EasyPost/ep-actions composite action, and there is no verified-publisher action for just. Resolves the latest release tag via the github.com redirect (avoids api.github.com rate limits on shared runner IPs), downloads the correct asset per RUNNER_OS (Linux/macOS/Windows), extracts into $RUNNER_TEMP, and adds it to $GITHUB_PATH so later steps in any shell can find it.
sroomberg-ep
force-pushed
the
chore/install-just-via-curl
branch
from
52eba91 to
7544231
Compare
Author
|
Closing for now. Holding off on the curl-based just install pending a decision on the broader approach for public repos (approved-list exception for extractions/setup-just vs. making EasyPost/ep-actions consumable). |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Replaces the unverified third-party action
extractions/setup-justwith arunstep that installsjustdirectly from the official installer athttps://just.systems/install.sh.Why
extractions/setup-justis from an unverified publisher and is not on the approved list inEasyPost/ep-actions/ApprovedThirdPartyActions.yaml.EasyPost/ep-actionscomposite action (GitHub does not allow public repos to reference actions in private repos).just.Installing via the official script removes the third-party action dependency entirely.
How
shell: bashensures it also runs on Windows runners (where applicable).