ActionRank
Check your actions

JavaScript Action

Actively maintained

suzuki-shunsuke/tfaction · MIT

Framework for Monorepo to build high level Terraform Workflows by GitHub Actions

★ 396 starsLast commit todayLatest v2.0.5
B
77
/ 100
Security 75Maintenance 100Popularity 53Reliability 70

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesEnabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: suzuki-shunsuke/tfaction@d0d52eb8b2ff13d6e27ac9653d038df384e58827 # v2.0.5

Mutable tags like v2.0.5 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: suzuki-shunsuke/tfaction@d0d52eb8b2ff13d6e27ac9653d038df384e58827 # v2.0.5

Score breakdown

Security (35%)75
Popularity (20%)53
Maintenance (30%)100
Reliability (15%)70