ActionRank
Check your actions

Deploy to Heroku

Stale

AkhileshNS/heroku-deploy · MIT

A simple github action that dynamically deploys an app to heroku

★ 1k starsLast commit 3 months agoLatest v3.15.15
D
52
/ 100
Security 37Maintenance 58Popularity 56Reliability 70

Security signals

OpenSSF Scorecard2.9 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: AkhileshNS/heroku-deploy@1b080913896a5d6d44a18e9e208f8eb1fee9b0f7 # v3.15.15

Mutable tags like v3.15.15 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: AkhileshNS/heroku-deploy@1b080913896a5d6d44a18e9e208f8eb1fee9b0f7 # v3.15.15

Score breakdown

Security (35%)37
Popularity (20%)56
Maintenance (30%)58
Reliability (15%)70