ActionRank
Check your actions

S3 Sync

Abandoned

jakejarvis/s3-sync-action · MIT · archived

🔄 GitHub Action to sync a directory with a remote S3 bucket 🧺

★ 1.1k starsLast commit 6 years agoLatest v0.5.1
F
21
/ 100
Security 32Maintenance 0Popularity 47Reliability 0

Security signals

OpenSSF Scorecard2.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: jakejarvis/s3-sync-action@be0c4ab89158cac4278689ebedd8407dd5f35a83 # v0.5.1

Mutable tags like v0.5.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: jakejarvis/s3-sync-action@be0c4ab89158cac4278689ebedd8407dd5f35a83 # v0.5.1

Score breakdown

Security (35%)32
Popularity (20%)47
Maintenance (30%)0
Reliability (15%)0