ActionRank

run-vcpkg

Actively maintained

lukka/run-vcpkg · MIT

The GitHub Action to setup vcpkg for your C++ based projects. Stores built ports using Binary Caching backed onto GH Cache.

235 starsLast commit 27 days agoLatest v11.6
D
53
/ 100
Security 44Maintenance 82Popularity 45Reliability 30

Security signals

OpenSSF Scorecard4.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6

Mutable tags like v11.6 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6

Score breakdown

Security (35%)44
Popularity (20%)45
Maintenance (30%)82
Reliability (15%)30

Add this badge to your README

ActionRank grade badge for run-vcpkg
Markdown
[![ActionRank](https://actionrank.dev/api/badge/lukka-run-vcpkg)](https://actionrank.dev/actions/lukka-run-vcpkg)
HTML version
HTML
<a href="https://actionrank.dev/actions/lukka-run-vcpkg"><img src="https://actionrank.dev/api/badge/lukka-run-vcpkg" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

Get alerts for run-vcpkg

We'll email you only if run-vcpkg becomes abandoned or a new advisory is published. Unsubscribe any time. How we handle your address