Improvements to script functionality and flexibility:

• Added support for --resolve-shas and --dedupe-by-repo flags in get-actions-usage-in-organization.sh, allowing users to resolve commit SHAs to tags and count unique repositories per action, respectively. Input validation ensures these flags are only used with the appropriate counting modes. [1] [2]
• Implemented caching for SHA-to-tag resolution in get-actions-usage-in-organization.sh to improve performance and avoid redundant API calls. Temporary files are cleaned up automatically.
• Enhanced counting logic to support deduplication by repository and improved version normalization (e.g., converting @4.*.* to @v4 and @4.3.0 to @v4.3.0).

Output and user experience improvements:

• Added explanatory notes and warnings to script outputs, clarifying how counts are calculated and highlighting repositories that could not be analyzed due to permissions or disabled Dependency Graph. Output formatting for txt, csv, and md is now more consistent and informative.
• Improved error handling and flag parsing in get-actions-usage-in-repository.sh, including support for the --resolve-shas flag and clear error messages when SBOM data cannot be accessed.