Create and Troubleshoot Custom Actions GH-200 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which version pinning strategy provides the highest level of security and reproducibility for a third-party action?

   • APinning to a full commit SHA
   • BPinning to the latest release tag
   • CPinning to a minor version tag (e.g., v1.2)
   • DPinning to a major version tag (e.g., v1)
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A team wants to create a composite action that runs two shell commands sequentially. They create an action.yml file with a 'runs' section containing 'steps'. When they test it, the action fails immediately with 'Unexpected value 'steps''. What is the most likely cause?

   • AThe 'runs' section is missing the 'main' property.
   • BThe action.yml file is named incorrectly.
   • CThe action.yml is missing the 'using: composite' declaration in the 'runs' section.
   • DThe steps do not have a 'run' property.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization publishes an action to the GitHub Marketplace. They release a patch update and move the v1 tag to the new commit. A user who pinned to @v1 reports that their workflow now behaves differently. What is the most likely explanation?

   • AThe v1 tag is mutable, so moving it changed the code that the user's workflow executes.
   • BThe action's action.yml file was changed in the patch release.
   • CThe user's workflow is pinned to a full SHA, not the v1 tag.
   • DThe user's workflow is using a cached version of the action.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A Docker action fails with 'docker: Error response from daemon: pull access denied for myimage, repository does not exist or may require authorization'. The action.yml references a Dockerfile. What is the most likely cause?

   • AThe Dockerfile uses a base image from a private registry that requires authentication.
   • BThe Dockerfile is not in the repository root.
   • CThe action.yml specifies 'runs.using: docker' but the image is not built.
   • DThe action uses a pre-built image instead of a Dockerfile.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   A workflow using a custom action fails with the error: "Required input 'token' is missing". What is the most likely cause?

   • AThe action is not compatible with the runner's operating system.
   • BThe action's Dockerfile is missing the ENTRYPOINT instruction.
   • CThe action's action.yml defines an input named 'token' as required, but the workflow does not provide it.
   • DThe action's code has a syntax error.
   Reveal Solution Discussion Select an answer first