ActionRank
Check your actions

action-forge-publish

Actively maintained

barnumbirr/action-forge-publish · Apache-2.0

GitHub Action to build and publish modules to Puppet Forge.

★ 8 starsLast commit 1 months agoLatest v2.16.0
D
42
/ 100
Security 32Maintenance 53Popularity 20Reliability 70

Security signals

OpenSSF Scorecard2.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: barnumbirr/action-forge-publish@46c363f59d569449759a761ac6ee574f7962c4df # v2.16.0

Mutable tags like v2.16.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: barnumbirr/action-forge-publish@46c363f59d569449759a761ac6ee574f7962c4df # v2.16.0

Score breakdown

Security (35%)32
Popularity (20%)20
Maintenance (30%)53
Reliability (15%)70