GH-200 · Question #31
An organization's policies specify only local actions are allowed. How should actions be distributed for this organization?
The correct answer is B. via repositories owned by the organization. When an organization's policy allows only local actions, actions must be stored in repositories owned by the organization itself. GitHub Actions can reference actions within the same organization using the {owner}/{repo} path, where owner is the organization. This keeps all…
Question
An organization’s policies specify only local actions are allowed. How should actions be distributed for this organization?
Options
- Avia a repository owned by a third party
- Bvia repositories owned by the organization
- Cvia the GitHub Marketplace
- Dvia the .github repository owned by the organization
How the community answered
(44 responses)- A2% (1)
- B75% (33)
- C7% (3)
- D16% (7)
Explanation
When an organization's policy allows only local actions, actions must be stored in repositories owned by the organization itself. GitHub Actions can reference actions within the same organization using the {owner}/{repo} path, where owner is the organization. This keeps all action code internal. The GitHub Marketplace (option C) and third-party repositories (option A) are external sources, which would violate the local-only policy. The .github repository (option D) is a special repo for community health files and default workflows, not the standard distribution point for shared actions across an organization.
Topics
Community Discussion
No community discussion yet for this question.