Please remove nowsecure from marketplace
nowsecure appears prominently in the marketplace:
https://github.com/marketplace?query=nowsecure
There's no need to list an action on the marketplace unless you're:
- Supporting it
- Looking for more consumers
Anyone can use any public github.com repository as an action source regardless of whether it is published to the marketplace (including from another action, such as your sbom action).
This action doesn't work anywhere close to out of the box
Using the standard use latest version button
yields: https://github.com/check-spelling-sandbox/stunning-bassoon/actions/runs/13559420392
:x: Can't find 'action.yml', 'action.yaml' or 'Dockerfile' for action 'nowsecure/nowsecure-action@v4'.
The advertisement prose hints at problems
https://github.com/nowsecure/nowsecure-action/blob/901b53b55dfe9d9813e280078163629a04117269/README.md?plain=1#L5
If you try to follow getting started
https://github.com/nowsecure/nowsecure-action/blob/901b53b55dfe9d9813e280078163629a04117269/docs/getting-started.md?plain=1#L17-L19
points to https://github.com/nowsecure/nowsecure-action/blob/901b53b55dfe9d9813e280078163629a04117269/workflows/basic.yml
you get https://github.com/check-spelling-sandbox/stunning-bassoon/actions/runs/13559514587
:x: This request has been automatically failed because it uses a deprecated version of
actions/upload-artifact: v2. Learn more: https://github.blog/changelog/2024-02-13-deprecation-notice-v1-and-v2-of-the-artifact-actions/
There's no reason to continue advertising an action that people can't set up based on the available documentation.
@nowSecure team: any update on the health of this github action?