ActionRank
Check your actions

Install Lua/LuaJIT

Actively maintained

leafo/gh-actions-lua

GitHub action for Lua/LuaJIT

★ 102 starsLast commit 9 days agoLatest v13.0.0
C
58
/ 100
Security 37Maintenance 92Popularity 38Reliability 68

Security signals

OpenSSF Scorecard2.9 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: leafo/gh-actions-lua@6919171ccf181b826f44b9bca76307b577217377 # v13.0.0

Mutable tags like v13.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: leafo/gh-actions-lua@6919171ccf181b826f44b9bca76307b577217377 # v13.0.0

Score breakdown

Security (35%)37
Popularity (20%)38
Maintenance (30%)92
Reliability (15%)68