ActionRank

Pixela pi action

Abandoned

peaceiris/actions-pixela · MIT · archived

GitHub Actions for Pixela (a-know/pi) - a-know/pi Setup Action. Linux (Ubuntu), macOS, and Windows are supported.

11 starsLast commit 5 years agoLatest v2.1.7
F
18
/ 100
Security 39Maintenance 0Popularity 22Reliability 0

Security signals

OpenSSF Scorecard3.2 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: peaceiris/actions-pixela@da1aad94b817afe365c1dcc99426c861c22cb1e2 # v2.1.7

Mutable tags like v2.1.7 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: peaceiris/actions-pixela@da1aad94b817afe365c1dcc99426c861c22cb1e2 # v2.1.7

Score breakdown

Security (35%)39
Popularity (20%)22
Maintenance (30%)0
Reliability (15%)0