ActionRank
Check your actions

Itch.io - Publish

Abandoned

KikimoraGames/itch-publish · MIT

Publish releases to Itch.io

★ 60 starsLast commit 4 years agoLatest v0.0.3
F
30
/ 100
Security 38Maintenance 4Popularity 26Reliability 70

Security signals

OpenSSF Scorecard3.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: KikimoraGames/itch-publish@ea06fdc7e36b34a6c4f88b379a73f3362537b998 # v0.0.3

Mutable tags like v0.0.3 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: KikimoraGames/itch-publish@ea06fdc7e36b34a6c4f88b379a73f3362537b998 # v0.0.3

Score breakdown

Security (35%)38
Popularity (20%)26
Maintenance (30%)4
Reliability (15%)70