run-cmake

Actively maintained

lukka/run-cmake · MIT

GitHub Action to build C++ applications with CMake (CMakePresets.json), Ninja and vcpkg on GitHub.

★ 195 starsLast commit 1 months agoLatest v10.9

/ 100

Security signals

OpenSSF Scorecard3.9 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: lukka/run-cmake@5d55ea7949e25f69f0ecb516d8d572297e03a956 # v10.9

Mutable tags like v10.9 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: lukka/run-cmake@5d55ea7949e25f69f0ecb516d8d572297e03a956 # v10.9

Score breakdown

Security (35%)43

Popularity (20%)43

Maintenance (30%)82

Reliability (15%)30