ActionRank
Check your actions

cargo-deny

Actively maintained

EmbarkStudios/cargo-deny-action · Apache-2.0

❌ GitHub Action for cargo-deny 🦀

★ 190 starsLast commit 5 days agoLatest v2.1.1
C
66
/ 100
Security 52Maintenance 92Popularity 50Reliability 70

Security signals

OpenSSF Scorecard5.3 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1

Mutable tags like v2.1.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1

Score breakdown

Security (35%)52
Popularity (20%)50
Maintenance (30%)92
Reliability (15%)70