# just-vendor

> Vendor just modules

Install just-pm and vendor the shared `just` modules declared in just.toml from FSHTech/just-packages, authenticating with read-only deploy keys. Pass the keys via env on the calling step: DEPLOY_KEY_JUST_PACKAGES (always) and DEPLOY_KEY_JUST_PACKAGE_MANAGER (used to install just-pm from git -- omit it in just-package-manager itself, which already ships just-pm in its own checkout, so the action falls back to `uv run just-pm`). Each key is pinned with IdentitiesOnly so one shared agent doesn't auth as the first key and 404 the rest. Run actions/checkout + the uv sync that installs just-pm first.

## Inputs

| Input | Required | Default | Description |
|---|---|---|---|
| `dirs` | no | `.` | Whitespace-separated project dirs to sync (each must contain a just.toml). Dirs without one are skipped. Defaults to the repo root. |
| `just-pm-ref` | no | `just-pm-v0.5.0` | Git ref of just-pm to install (when installing from git). |

## Usage

```yaml
- uses: actions/checkout@v6
- uses: FSHTech/github-actions/just-vendor@v1
```