ActionRank

Debugging with tmate

Actively maintained

mxschmitt/action-tmate · MIT

Debug your GitHub Actions via SSH by using tmate to get access to the runner system itself.

3.6k starsLast commit 3 days agoLatest v3.24
C
66
/ 100
Security 54Maintenance 84Popularity 64Reliability 60

Security signals

OpenSSF Scorecard5.7 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: mxschmitt/action-tmate@35b54afac29c97fb54faba5b513f8fbd1882f113 # v3.24

Mutable tags like v3.24 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: mxschmitt/action-tmate@35b54afac29c97fb54faba5b513f8fbd1882f113 # v3.24

Score breakdown

Security (35%)54
Popularity (20%)64
Maintenance (30%)84
Reliability (15%)60