Domain 3: Actions, Marketplace & Reuse

GitHub Actions · 44 questions

• Which fields are REQUIRED in an action's 'action.yml' metadata file?
• What is a key difference between a composite action and a reusable workflow?
• When 'actions/checkout@v4' is used without any 'with:' parameters on a push event, what does it check out?
• From a security standpoint, what is the most secure way to reference a third-party action?
• What does the 'Verified creator' badge on a GitHub Marketplace action indicate?
• How do you reference a local action stored in '.github/actions/setup-env' within the same repository?
• In an action.yml for a JavaScript action, which 'runs.using' value specifies Node.js 20?
• In a Docker container action's action.yml, what do the 'args:' field values correspond to in the Docker context?
• When calling a reusable workflow, what does 'secrets: inherit' do?
• In an action.yml, what is the purpose of the 'branding:' block?
• How do you pass an output value from a reusable workflow back to the caller workflow?
• What is the correct syntax to call a reusable workflow from a different repository?
• In a JavaScript action's action.yml, what is the purpose of the 'post:' field under 'runs:'?
• In a composite action's action.yml, what additional field is REQUIRED for each 'run:' step that is NOT required in regular workflow run steps?
• Which of the following is a limitation of reusable workflows?
• What is the maximum nesting depth for calling reusable workflows from other reusable workflows?
• What does 'persist-credentials: false' do in actions/checkout?
• In a JavaScript action using @actions/core, which function marks the action as failed?
• In a composite action, how do you reference an input named 'deploy-env' inside a run step?
• When publishing a new version of a GitHub Action to the Marketplace, what is the recommended way to maintain the major version tag (e.g., v2) pointing to the latest minor/patch?
• In action.yml for a composite action, which 'runs' configuration is required?
• When authoring a reusable workflow, where do you declare the outputs that callers can read after the reusable job finishes?
• A repository stores a composite action in '.github/actions/notify-slack'. Which uses value references it from a workflow in the same repository?
• Which two top-level keys are required in every action.yml metadata file? (Choose two)
• A reusable workflow lives in 'octo-org/workflows/.github/workflows/build.yml@v1'. What must be true for a private caller repository in the same org to use it?
• In a JavaScript action, which @actions/core API reads an input defined in action.yml as 'api-key'?
• A workflow references 'uses: docker/login-action@v3'. What does the '@v3' portion select?
• Which capability is supported by reusable workflows but NOT by composite actions?
• Security requires immutable third-party action references. Which uses: line best meets that requirement?
• In a composite action, a step with 'id: prep' sets an output 'version'. How do you expose 'version' to workflows that use the action?
• You need a reusable unit that runs several shell steps, shares the runner workspace, and avoids building a container image. Which action type fits best?
• A maintainer force-moves the 'v3' tag of a third-party action to a new commit that adds telemetry. Workflows using '@v3' will:
• A composite action lives at '.github/actions/setup-build-tools' in the same repository as the workflow. Which uses: value references it?
• Which two approaches correctly provide secrets to a called reusable workflow? (Choose two.)
• In action.yml, an input 'region' is marked 'required: true' and also has 'default: us-east-1'. What should authors understand?
• Workflow A calls reusable workflow B, which calls reusable workflow C. What is true about further nesting?
• A caller workflow must give a reusable workflow access to the same repository secrets without listing each secret name. Which configuration is correct?
• A composite action must expose an output named bundle-path to the caller workflow. Where is the output declared, and how is its value produced at runtime?
• An enterprise wants many internal repositories to call a private composite action without publishing it to the public Marketplace. Which approach is appropriate?
• You are packaging a multi-step setup sequence as a shareable action inside action.yml. Which runs.using value indicates a composite action?
• In action.yml, input region is optional for callers but should default to us-east-1 when omitted. Which declaration is correct?
• A repository calls its own reusable workflow file at .github/workflows/build.yml. Which uses: form is valid for a same-repo reusable workflow on a release tag v1.4.0?
• Which two statements correctly contrast composite actions and reusable workflows? (Choose two.)
• When authoring a Docker container action, which action.yml configuration correctly points at a Dockerfile in the action repository?