nowsecure-action icon indicating copy to clipboard operation
nowsecure-action copied to clipboard

Please remove nowsecure from marketplace

Open jsoref opened this issue 10 months ago • 1 comments

nowsecure appears prominently in the marketplace:

https://github.com/marketplace?query=nowsecure

Image

There's no need to list an action on the marketplace unless you're:

  • Supporting it
  • Looking for more consumers

Anyone can use any public github.com repository as an action source regardless of whether it is published to the marketplace (including from another action, such as your sbom action).

This action doesn't work anywhere close to out of the box

Using the standard use latest version button

Image

yields: https://github.com/check-spelling-sandbox/stunning-bassoon/actions/runs/13559420392

:x: Can't find 'action.yml', 'action.yaml' or 'Dockerfile' for action 'nowsecure/nowsecure-action@v4'.

The advertisement prose hints at problems

Image

https://github.com/nowsecure/nowsecure-action/blob/901b53b55dfe9d9813e280078163629a04117269/README.md?plain=1#L5

If you try to follow getting started

https://github.com/nowsecure/nowsecure-action/blob/901b53b55dfe9d9813e280078163629a04117269/docs/getting-started.md?plain=1#L17-L19

points to https://github.com/nowsecure/nowsecure-action/blob/901b53b55dfe9d9813e280078163629a04117269/workflows/basic.yml

you get https://github.com/check-spelling-sandbox/stunning-bassoon/actions/runs/13559514587

:x: This request has been automatically failed because it uses a deprecated version of actions/upload-artifact: v2. Learn more: https://github.blog/changelog/2024-02-13-deprecation-notice-v1-and-v2-of-the-artifact-actions/


There's no reason to continue advertising an action that people can't set up based on the available documentation.

jsoref avatar Feb 27 '25 12:02 jsoref

@nowSecure team: any update on the health of this github action?

DanBradbury avatar Jun 18 '25 11:06 DanBradbury