ActionRank

Hugo setup

Actively maintained

peaceiris/actions-hugo · MIT

GitHub Actions for Hugo ⚡️ Setup Hugo quickly and build your site fast. Hugo extended, Hugo Modules, Linux (Ubuntu), macOS, and Windows are supported.

1.6k starsLast commit 12 days agoLatest v3.2.1
B
73
/ 100
Security 67Maintenance 92Popularity 57Reliability 70

Security signals

OpenSSF Scorecard6.1 / 10
SECURITY.md presentNo
Immutable releasesEnabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: peaceiris/actions-hugo@2752ce1d29631191ea3f27c23495fa06139a5b78 # v3.2.1

Mutable tags like v3.2.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: peaceiris/actions-hugo@2752ce1d29631191ea3f27c23495fa06139a5b78 # v3.2.1

Score breakdown

Security (35%)67
Popularity (20%)57
Maintenance (30%)92
Reliability (15%)70