ActionRank
Check your actions

aws-assume-role

Abandoned

nordcloud/aws-assume-role · MIT

GitHub action to assume subsequent AWS roles

★ 23 starsLast commit 3 years agoLatest v0.3.5
F
33
/ 100
Security 44Maintenance 4Popularity 28Reliability 70

Security signals

OpenSSF Scorecard4.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: nordcloud/aws-assume-role@89dbe4b3b5be47317fd44784dca68a28111620c7 # v0.3.5

Mutable tags like v0.3.5 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: nordcloud/aws-assume-role@89dbe4b3b5be47317fd44784dca68a28111620c7 # v0.3.5

Score breakdown

Security (35%)44
Popularity (20%)28
Maintenance (30%)4
Reliability (15%)70