Import Code-Signing Certificates

Actively maintained

Apple-Actions/import-codesign-certs · MIT

GitHub Action for Importing Code-signing Certificates into a Keychain

★ 288 starsLast commit 2 days agoLatest v7.2.0

/ 100

Security signals

OpenSSF Scorecard6.2 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: Apple-Actions/import-codesign-certs@288b8ec97b82c66b6f2a6baaf7acc8dfbcbe331c # v7.2.0

Mutable tags like v7.2.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: Apple-Actions/import-codesign-certs@288b8ec97b82c66b6f2a6baaf7acc8dfbcbe331c # v7.2.0

Score breakdown

Security (35%)57

Popularity (20%)47

Maintenance (30%)100

Reliability (15%)58

Add this badge to your README

ActionRank grade badge for Import Code-Signing Certificates

Markdown

[![ActionRank](https://actionrank.dev/api/badge/apple-actions-import-codesign-certs)](https://actionrank.dev/actions/apple-actions-import-codesign-certs)

HTML version

HTML

<a href="https://actionrank.dev/actions/apple-actions-import-codesign-certs"><img src="https://actionrank.dev/api/badge/apple-actions-import-codesign-certs" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

Import Code-Signing Certificates

Security signals

How to use it safely

Score breakdown

Add this badge to your README

Get alerts for Import Code-Signing Certificates