Github actions repository redirect

[stevengonsalvez]

When a repository name changes , github auto redirects the repository

eg: https://github.com/nick-invision/retry will auto redirect to https://github.com/nick-fields/retry

But when used in an action as such

      - name: Validate version number (domain)
        uses: nick-invision/[email protected]
        with:
          timeout_seconds: 20
          max_attempts: 15
          retry_wait_seconds: 10
          command: |
            set -x
            IP=$(curl "https://something")
            echo $IP | grep ${{ github.sha }}

This fails with a repository not found.

[TingluoHuang]

this is by design, there should be a doc update soon.

[thboop]

Going to close this out as this issue concerns the actions platform more generally. This is intentional, and docs updates being done to clarify this behavior

[TingluoHuang]

https://docs.github.com/en/actions/learn-github-actions/finding-and-customizing-actions#adding-an-action-to-your-workflow

[pjanotti]

@TingluoHuang @thboop the thread is limited to org rename? Does the same apply to repositories moved between organizations?

My confusion is due to the following when I try to get to the repo of cla-assistant/[email protected] I get to a different org. Ok, that redirection I can understand as it to mean that the repository was transferred to another org since I directly typed the URL. Is the action redirection in the workflow happening silently? This seems a potential security issue because one can think that their action comes from one org and in fact it comes from another one.

Could you please clarify? I expected it to fail since the docs state:

https://docs.github.com/en/actions/learn-github-actions/finding-and-customizing-actions#adding-an-action-to-your-workflow

Note: To enhance security, GitHub Actions does not support redirects for actions or reusable workflows. This means that when the owner, name of an action's repository, or name of an action is changed, any workflows using that action with the previous name will fail.'

However, the workflow using the action is running without errors (a warning about node20, but, still running).