ActionRank

Play Ansible Playbook

Actively maintained

arillso/action.playbook · MIT

GitHub Action for running Ansible playbooks with Galaxy support and automated SSH key handling in CI/CD pipelines

37 starsLast commit 3 days agoLatest 0.5.0
C
64
/ 100
Security 59Maintenance 90Popularity 29Reliability 70

Security signals

OpenSSF Scorecard6.5 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: arillso/action.playbook@3fa4d0bcd270c84fbc77ab3df8f54dafd118e9f2 # 0.5.0

Mutable tags like 0.5.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: arillso/action.playbook@3fa4d0bcd270c84fbc77ab3df8f54dafd118e9f2 # 0.5.0

Score breakdown

Security (35%)59
Popularity (20%)29
Maintenance (30%)90
Reliability (15%)70