Cypress.io

Actively maintained

cypress-io/github-action · MIT

GitHub Action for running Cypress end-to-end & component tests

★ 1.5k starsLast commit yesterdayLatest v7.4.1

/ 100

Security signals

OpenSSF Scorecard6.6 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: cypress-io/github-action@fa4a118725a8f001170d49631ea89e5d66fee626 # v7.4.1

Mutable tags like v7.4.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: cypress-io/github-action@fa4a118725a8f001170d49631ea89e5d66fee626 # v7.4.1

Score breakdown

Security (35%)60

Popularity (20%)62

Maintenance (30%)100

Reliability (15%)70