actions/toolkit

View on GitHub

The GitHub ToolKit for developing GitHub Actions.

Stars: 5.9k
Forks: 1.8k
Open beginner issues: 0
Indexed issues: 383

Dominant language: TypeScript
License: MIT
Last GitHub push: Aug 3, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

383 open issues indexed

. Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 10/100

actions/toolkit#2492 · Opened Sep 5, 2026
Ver Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 10/100

actions/toolkit#2491 · Opened Sep 5, 2026
cache: concurrent download is gated on the .blob.core.windows.net hostname, so every non-Azure cache backend restores single-stream Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

actions/toolkit#2487 · Opened Aug 31, 2026
Add an API for generating content directly in the tool cache Open

Difficulty 4/5 3-5 days Newbie friendliness 57/100

actions/toolkit#2485 · 2 reactions · Opened Aug 25, 2026
@actions/glob 0.6.1 silently fails to match Windows paths when bundled as ESM with Rollup Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 55/100

actions/toolkit#2484 · Opened Aug 25, 2026
H Open

bug

Difficulty 5/5 Over a week Newbie friendliness 5/100

actions/toolkit#2479 · Opened Aug 15, 2026
Print artifacts that are found when listing Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

actions/toolkit#2475 · Opened Aug 6, 2026
@actions/cache: a failed cache download leaks its segment timer and stalls the job for up to 10 minutes Open

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

actions/toolkit#2470 · 1 comment · Opened Aug 5, 2026
404 webpage Open

Difficulty 4/5 3-5 days Newbie friendliness 20/100

actions/toolkit#2442 · Opened Jun 21, 2026
Name Parameter Change for Single-File Artifact Upload Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

actions/toolkit#2441 · Opened Jun 20, 2026
artifact: v4+ blocked on self-hosted GHES even on releases that ship the v2 backend (3.13+) Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

actions/toolkit#2439 · 2 comments · 1 reaction · Opened Jun 19, 2026
Aether Bridge API - Autonomous Agent Team Management Open

Difficulty 5/5 Over a week Newbie friendliness 10/100

actions/toolkit#2430 · Opened Jun 12, 2026
using `github.token` with `@actions/github` Open

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

actions/toolkit#2427 · Opened Jun 7, 2026
## Pull request overview Open

Difficulty 4/5 3-5 days Newbie friendliness 20/100

actions/toolkit#2420 · Opened May 29, 2026
[Security/Medium-High]: SSRF vulnerability in downloadTool() allows internal network access Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

actions/toolkit#2417 · Opened May 24, 2026
Ship `7zdec.exe` as build-provenanced npm package instead of vendoring it Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

actions/toolkit#2413 · 1 comment · 1 reaction · Opened May 19, 2026
@actions/glob v0.7.0 breaks ESM actions: Minimatch is not a named export in minimatch v10 Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

actions/toolkit#2408 · 1 comment · Opened May 15, 2026
[Data Ingestion] ├─ OINP History (CSV/DB) ├─ Market Metrics (API) └─ System State (scores) [Feature Engine] ├─ Normalization ├─ Rolling windows └─ Risk flags [Predictive Layer] ├─ Model (probability) └─ Confidence band [Decision Support] ├─ NOW (High P, Low Risk) ├─ WATCH (Medium) └─ HOLD (Low) Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 10/100

actions/toolkit#2407 · 1 comment · 1 reaction · Opened May 14, 2026
New issue Open

actions/toolkit#2403 · Opened May 10, 2026
New issue Open

Difficulty 5/5 Over a week Newbie friendliness 1/100

actions/toolkit#2402 · Opened May 10, 2026
[@actions/artifact] Transitive dependency `buffers` has no declared license Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

actions/toolkit#2392 · 1 reaction · Opened May 1, 2026
Tejeda Open

bug

Difficulty 5/5 Over a week Newbie friendliness 5/100

actions/toolkit#2391 · Opened Apr 28, 2026
Tejeda Open

bug

Difficulty 5/5 Over a week Newbie friendliness 10/100

actions/toolkit#2390 · Opened Apr 28, 2026
Tejeda Open

bug

Difficulty 5/5 Over a week Newbie friendliness 1/100

actions/toolkit#2389 · Opened Apr 28, 2026
@actions/artifact: BlobClient upload fails with "Bad Request" through HTTPS proxy — no proxy transport configured Open

Difficulty 3/5 1-2 days Newbie friendliness 67/100

actions/toolkit#2377 · Opened Apr 15, 2026
properly join URLs Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

actions/toolkit#2375 · Opened Apr 10, 2026
Please update dependency undici Open

Difficulty 1/5 1-3 hours Newbie friendliness 72/100

actions/toolkit#2361 · 4 comments · 12 reactions · Opened Mar 27, 2026
1a0868c487ee23efd0468a958fa220d1962a082d Open

Difficulty 5/5 Over a week Newbie friendliness 5/100

actions/toolkit#2340 · Opened Mar 10, 2026
zstd support for artifacts Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 58/100

actions/toolkit#2335 · Opened Mar 3, 2026
[artifact] `uploadArtifact({skipArchive:true})` warns when uploading zero-byte file Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

actions/toolkit#2333 · Opened Mar 3, 2026
@actions/attest buildSLSAProvenancePredicate should add inputs into externalParameters Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

actions/toolkit#2331 · 1 reaction · Opened Mar 2, 2026
`@actions/exec`: Handle receiving a signal of the child process Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

actions/toolkit#2313 · Opened Feb 23, 2026
Silent I/O failure after getExecOutput() completes in GitHub Actions runtime Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

actions/toolkit#2303 · Opened Feb 18, 2026
No "exports" main defined in @actions/core/package.json @v3 Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 64/100

actions/toolkit#2294 · 5 comments · 11 reactions · Opened Feb 3, 2026
Outdated import the package documentation (require) for ESM packages Open

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

actions/toolkit#2287 · 7 reactions · Opened Jan 31, 2026
Type errors while using @octokit/plugin-throttling with getOctokit Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

actions/toolkit#2283 · Opened Jan 30, 2026
Release notes not made for latest releases Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

actions/toolkit#2239 · 1 comment · 2 reactions · Opened Jan 12, 2026
tool-cache downloadTool does not support relative redirects Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

actions/toolkit#2226 · 1 comment · Opened Jan 3, 2026
artifact `Unable to make request` message should suggest checking githubstatus.com for non self-hosted runners Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

actions/toolkit#2225 · 1 comment · Opened Dec 24, 2025
core.summary.write() fails to display summary when running in a container Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

actions/toolkit#2224 · Opened Dec 23, 2025
Misleading annotations urls / missing annotations on commits pages Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

actions/toolkit#2223 · Opened Dec 19, 2025
Cache: Provide a way to suppress cache success messages Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 50/100

actions/toolkit#2222 · Opened Dec 17, 2025
Allow prefix on problem matcher Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 42/100

actions/toolkit#2220 · Opened Dec 17, 2025
`getMultilineInput` doc claims each is trimmed which is inaccurate Open

Difficulty 1/5 Under an hour Newbie friendliness 55/100

actions/toolkit#2185 · Opened Nov 18, 2025
Malicious NPM Package Found Targeting GitHub By Typosquatting on GitHub Action Packages Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

actions/toolkit#2183 · Opened Nov 13, 2025
Cache created on Linux is not restorable on Windows Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 48/100

actions/toolkit#2181 · Opened Nov 12, 2025
@actions/artifact checks the expected hash against the response but not the file on the disk Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 42/100

actions/toolkit#2180 · 1 comment · Opened Nov 11, 2025
`Azure/ms-rest-js` -> `node-fetch@v2` dependency triggers "DeprecationWarning: The `punycode` module is deprecated" Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

actions/toolkit#2173 · 3 comments · 1 reaction · Opened Oct 29, 2025
`@actions/core`: codeql found `js/file-system-race` issue Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 45/100

actions/toolkit#2170 · Opened Oct 29, 2025
`@action/glob`: expose a public method to test patterns on given paths Open

enhancement

Difficulty 3/5 1-2 days Newbie friendliness 55/100

actions/toolkit#2169 · 1 reaction · Opened Oct 27, 2025

actions/toolkit

Get new issues in your inbox