Allowing Pipelines Actions in GitHub Actions
Gruntwork Pipelines uses a set of Gruntwork built re-usable Github Actions, which are available in the GitHub Actions marketplace. Gruntwork is a Verified Creator of GitHub Actions.
Gruntwork recommends explicitly allowing Actions required by Gruntwork Pipelines to run in your GitHub organization. See Allowing select actions and reusable workflows to run to learn more.
You will need to allow the following GitHub Actions for Gruntwork Pipelines to run successfully:
Gruntwork recommends using a tagged version of the
gruntwork-io actions and a wildcard for the non-Gruntwork actions, as the non-Gruntwork actions are wrapped in the Gruntwork actions. This will require less administrative work to keep policies up to date with versions being used by Gruntwork actions. An example policy can be found below.
Navigate to each Gruntwork repository to retrieve the latest tagged release for each action.
GitHub Team and Pro
Currently GitHub Actions does not support selecting specific repos outside of your own GitHub organization for the team and pro tier. To use Gruntwork Pipelines you must select the Allow all actions and reusable workflows option in the Actions general settings at the Organization level.