ActionRank
Check your actions

Publish AUR package

Actively maintained

KSXGitHub/github-actions-deploy-aur · MIT

GitHub Actions to publish AUR package

★ 174 starsLast commit 12 days agoLatest v4.2.0
C
62
/ 100
Security 48Maintenance 84Popularity 45Reliability 70

Security signals

OpenSSF Scorecard4.7 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: KSXGitHub/github-actions-deploy-aur@084b0d9b15415bf9cdb65d44dad1efe37a354050 # v4.2.0

Mutable tags like v4.2.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: KSXGitHub/github-actions-deploy-aur@084b0d9b15415bf9cdb65d44dad1efe37a354050 # v4.2.0

Score breakdown

Security (35%)48
Popularity (20%)45
Maintenance (30%)84
Reliability (15%)70