Import Code-Signing Certificates

Actively maintained

Apple-Actions/import-codesign-certs · MIT

GitHub Action for Importing Code-signing Certificates into a Keychain

★ 281 starsLast commit todayLatest v7.0.0

/ 100

Security signals

OpenSSF Scorecard5.0 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: Apple-Actions/import-codesign-certs@5142e029c445c10ffc7149d172e540235a065466 # v7.0.0

Mutable tags like v7.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: Apple-Actions/import-codesign-certs@5142e029c445c10ffc7149d172e540235a065466 # v7.0.0

Score breakdown

Security (35%)50

Popularity (20%)47

Maintenance (30%)90

Reliability (15%)80

Add this badge to your README

ActionRank grade badge for Import Code-Signing Certificates

Markdown

[![ActionRank](https://actionrank.dev/api/badge/apple-actions-import-codesign-certs)](https://actionrank.dev/actions/apple-actions-import-codesign-certs)

HTML version

HTML

<a href="https://actionrank.dev/actions/apple-actions-import-codesign-certs"><img src="https://actionrank.dev/api/badge/apple-actions-import-codesign-certs" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

Import Code-Signing Certificates

Security signals

How to use it safely

Score breakdown

Add this badge to your README

Get alerts for Import Code-Signing Certificates