I was following a github action security hardening guide and one of the suggestions is to enable a feature to restrict workflows to only using verified actions. I noticed this action isn't showing up with a verified badge in the marketplace. Here's an example of an action that is verified: https://github.com/marketplace/actions/configure-aws-credentials-action-for-github-actions (you can see on the right it says verified).
You can verify that this action is not verified by using the following URL and toggling the By: ... filter: https://github.com/marketplace?query=rollbar&verification=verified_creator&type=actions
Anyhow, I'm not sure what's involved in getting it verified. I am assuming it requires getting in touch with Github. I noticed the rollbar org already says it's verified so seems a bit strange that the action also doesn't appear verified.
I was following a github action security hardening guide and one of the suggestions is to enable a feature to restrict workflows to only using verified actions. I noticed this action isn't showing up with a verified badge in the marketplace. Here's an example of an action that is verified: https://github.com/marketplace/actions/configure-aws-credentials-action-for-github-actions (you can see on the right it says verified).
You can verify that this action is not verified by using the following URL and toggling the
By: ...filter: https://github.com/marketplace?query=rollbar&verification=verified_creator&type=actionsAnyhow, I'm not sure what's involved in getting it verified. I am assuming it requires getting in touch with Github. I noticed the rollbar org already says it's verified so seems a bit strange that the action also doesn't appear verified.