ActionRank

jekyll-deploy-gh-pages

Abandoned

BryanSchuetz/jekyll-deploy-gh-pages

A GitHub Action for building a Jekyll site (with custom plugins) and deploying it back to your gh-pages branch.

121 starsLast commit 6 years agoLatest v2.0
F
23
/ 100
Security 28Maintenance 4Popularity 35Reliability 30

Security signals

OpenSSF Scorecard1.4 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: BryanSchuetz/jekyll-deploy-gh-pages@c65ae23c7f03c25370004f16cba53110df1a4da4 # v2.0

Mutable tags like v2.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: BryanSchuetz/jekyll-deploy-gh-pages@c65ae23c7f03c25370004f16cba53110df1a4da4 # v2.0

Score breakdown

Security (35%)28
Popularity (20%)35
Maintenance (30%)4
Reliability (15%)30