Hugo Deploy GitHub Pages

Actively maintained

benmatselby/hugo-deploy-gh-pages · MIT

📦 A GitHub Action to build and deploy a Hugo site to GitHub Pages

★ 59 starsLast commit 1 months agoLatest v2.5.0

/ 100

Security signals

OpenSSF Scorecard3.4 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: benmatselby/hugo-deploy-gh-pages@c0e2d9ecd5fb30073fa70210a9029e57e733bff0 # v2.5.0

Mutable tags like v2.5.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: benmatselby/hugo-deploy-gh-pages@c0e2d9ecd5fb30073fa70210a9029e57e733bff0 # v2.5.0

Score breakdown

Security (35%)40

Popularity (20%)37

Maintenance (30%)75

Reliability (15%)70