action.yml

name: 'Kubectl tool installer'
description: 'Install a specific version of kubectl binary. Acceptable values are latest or any semantic version string like "v1.15.0"'
inputs:
   version:
      description: 'Version of kubectl'
      required: true
      default: 'latest'
   downloadBaseURL:
      description: 'Base URL to download kubectl from (https only). Use for private mirrors.'
      required: false
      default: 'https://dl.k8s.io'
   checksum:
      description: 'Expected SHA256 of the kubectl binary (lowercase 64-char hex). Required when overriding downloadBaseURL; the action fails closed without it to prevent unverified binaries from poisoning the tool cache.'
      required: false
      default: ''
   downloadAuthToken:
      description: 'Optional bearer token sent as the Authorization header when fetching from downloadBaseURL. Stripped on cross-origin redirects.'
      required: false
      default: ''
outputs:
   kubectl-path:
      description: 'Path to the cached kubectl binary'
branding:
   color: 'blue'
runs:
   using: 'node24'
   main: 'lib/index.js'