{"id":39512278,"url":"https://github.com/kalgurn/update-project-item-status","last_synced_at":"2026-01-18T06:05:49.404Z","repository":{"id":36950971,"uuid":"492115055","full_name":"kalgurn/update-project-item-status","owner":"kalgurn","description":"A GitHub action to move the freshly created project item into a desired column/status","archived":false,"fork":false,"pushed_at":"2025-04-30T10:39:40.000Z","size":1844,"stargazers_count":3,"open_issues_count":7,"forks_count":5,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-07-07T13:37:14.533Z","etag":null,"topics":["github-actions","github-projects"],"latest_commit_sha":null,"homepage":"","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kalgurn.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-05-14T04:50:22.000Z","updated_at":"2025-01-31T07:45:27.000Z","dependencies_parsed_at":"2025-01-31T08:24:47.928Z","dependency_job_id":"8251aaaa-95d9-4989-bc09-5d335fc48f4c","html_url":"https://github.com/kalgurn/update-project-item-status","commit_stats":{"total_commits":26,"total_committers":2,"mean_commits":13.0,"dds":"0.23076923076923073","last_synced_commit":"5e106f2c69d4b1001052de13dfcef1695fd0d861"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":"actions/typescript-action","purl":"pkg:github/kalgurn/update-project-item-status","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kalgurn%2Fupdate-project-item-status","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kalgurn%2Fupdate-project-item-status/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kalgurn%2Fupdate-project-item-status/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kalgurn%2Fupdate-project-item-status/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kalgurn","download_url":"https://codeload.github.com/kalgurn/update-project-item-status/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kalgurn%2Fupdate-project-item-status/sbom","scorecard":{"id":548285,"data":{"date":"2025-08-11","repo":{"name":"github.com/kalgurn/update-project-item-status","commit":"d59e4a4c2e9860ecd9766b2d9305a837a340f085"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":0,"reason":"Found 0/7 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:29","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:28","Warn: no topLevel permission defined: .github/workflows/check-dist.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: no topLevel permission defined: .github/workflows/pull_request.yml:1","Warn: no topLevel permission defined: .github/workflows/test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-dist.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/kalgurn/update-project-item-status/check-dist.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-dist.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/kalgurn/update-project-item-status/check-dist.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-dist.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/kalgurn/update-project-item-status/check-dist.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/kalgurn/update-project-item-status/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/kalgurn/update-project-item-status/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/kalgurn/update-project-item-status/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/kalgurn/update-project-item-status/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/kalgurn/update-project-item-status/pull_request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/kalgurn/update-project-item-status/pull_request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/kalgurn/update-project-item-status/pull_request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/kalgurn/update-project-item-status/test.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/test.yml:14","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   2 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 9 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":2,"reason":"8 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-x4c5-c7rf-jjgv","Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q","Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38","Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975","Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-20T10:06:03.599Z","repository_id":36950971,"created_at":"2025-08-20T10:06:03.599Z","updated_at":"2025-08-20T10:06:03.599Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28531993,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-18T00:39:45.795Z","status":"online","status_checked_at":"2026-01-18T02:00:07.578Z","response_time":98,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["github-actions","github-projects"],"created_at":"2026-01-18T06:05:45.949Z","updated_at":"2026-01-18T06:05:49.391Z","avatar_url":"https://github.com/kalgurn.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://github.com/actions/typescript-action/actions\"\u003e\u003cimg alt=\"typescript-action status\" src=\"https://github.com/actions/typescript-action/workflows/build-test/badge.svg\"\u003e\u003c/a\u003e\n\u003c/p\u003e\n\n## kalgurn/update-project-item-status\n\nThis actions was designed as a complimentary action for the [actions/add-to-project](https://github.com/actions/add-to-project). It will allow to change the status(column) on the new GitHub Projects.\n\nUseful as a part of a workflow which creates a new items in a GitHub Projects so they can be placed in the desired column\n\n## Usage\n\nCreate a workflow which outputs an itemId for the desired item and specify the required fields.  \n\nIn the example below the newly created issues with a `bug` label would be added to a project and then the \"Triage\" status will be set to the resulted item.  \n\n```yaml\nname: Add bugs to bugs project\n\non:\n  issues:\n    types:\n      - opened\n\njobs:\n  add-to-project:\n    name: Add issue to project\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/add-to-project@main\n        id: addItem\n        with:\n          project-url: https://github.com/orgs/\u003corgName\u003e/projects/\u003cprojectNumber\u003e\n          github-token: ${{ secrets.ADD_TO_PROJECT_PAT }}\n          labeled: bug, needs-triage\n          label-operator: OR\n\n      - uses: kalgurn/update-project-item-status@main\n        with:\n          project-url: https://github.com/orgs/\u003corgName\u003e/projects/\u003cprojectNumber\u003e\n          github-token: ${{ secrets.ADD_TO_PROJECT_PAT }}\n          item-id: ${{ steps.addItem.outputs.itemId }}\n          status: \"Triage\"\n```\n\n## Inputs\n\n- `project-url` __(required)__ is the URL of the GitHub project to add issues to.  \n_eg: https://github.com/orgs|users/\u003cownerName\u003e/projects/\u003cprojectNumber\u003e_\n\n- `github-token` __(required)__ is a personal access token with the `repo`, `write:org` and `read:org` scopes.  \n_See [Creating a PAT and adding it to your repository](#creating-a-pat-and-adding-it-to-your-repository) for more details_\n\n- `item-id` __(required)__ is an ID of the item which requires a status change.  \n_Usually obtained through an [API](https://docs.github.com/en/issues/trying-out-the-new-projects-experience/using-the-api-to-manage-projects#finding-information-about-items-in-a-project)_\n\n- `status` __(required)__ desired status to be set for the item. Must be an existing project status\n\n## Creating a PAT and adding it to your repository\n\n- create a new [personal access\n  token](https://github.com/settings/tokens/new) with `repo`, `write:org` and\n  `read:org` scopes  \n  _See [Creating a personal access token](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token) for more information_\n\n- add the newly created PAT as a repository secret, this secret will be referenced by the [github-token input](#github-token)  \n  _See [Encrypted secrets](https://docs.github.com/en/actions/security-guides/encrypted-secrets#creating-encrypted-secrets-for-a-repository) for more information_\n\n## Development\n\nTo get started contributing to this project, clone it and install dependencies.\nNote that this action runs in Node.js 16.x, so we recommend using that version\nof Node (see \"engines\" in this action's package.json for details).\n\n```shell\n\u003e git clone https://github.com/kalgurn/update-project-item-status\n\u003e cd add-to-project\n\u003e npm install\n```\n\nOr, use [GitHub Codespaces](https://github.com/features/codespaces).\n\nSee the [toolkit\ndocumentation](https://github.com/actions/toolkit/blob/master/README.md#packages)\nfor the various packages used in building this action.\n\n## Publish to a distribution branch\n\nActions are run from GitHub repositories, so we check in the packaged action in\nthe \"dist/\" directory.\n\n```shell\n\u003e npm run build\n\u003e git add lib dist\n\u003e git commit -a -m \"Build and package\"\n\u003e git push origin release/0.0.x\n```\n\nNow, a release can be created from the branch containing the built action.\n\n# License\n\nThe scripts and documentation in this project are released under the [MIT License](LICENSE)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkalgurn%2Fupdate-project-item-status","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkalgurn%2Fupdate-project-item-status","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkalgurn%2Fupdate-project-item-status/lists"}