ActionRank
Check your actions

Kustomize Github Action

Abandoned

karancode/kustomize-github-action · MIT

Github action for kustomize

★ 50 starsLast commit 3 years agoLatest v1.3.2
F
31
/ 100
Security 36Maintenance 4Popularity 35Reliability 70

Security signals

OpenSSF Scorecard2.6 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: karancode/kustomize-github-action@883a86ec3535e4e7d0fe6450a85f8325c97d2a7b # v1.3.2

Mutable tags like v1.3.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: karancode/kustomize-github-action@883a86ec3535e4e7d0fe6450a85f8325c97d2a7b # v1.3.2

Score breakdown

Security (35%)36
Popularity (20%)35
Maintenance (30%)4
Reliability (15%)70