Terraform Module Releaser
Actively maintainedtechpivot/terraform-module-releaser · MIT
GitHub Action to automate versioning, releases, and documentation for Terraform modules in monorepos.
★ 225 starsLast commit yesterdayLatest v2.1.0
B
73
/ 100
Security signals
OpenSSF ScorecardNo data
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: techpivot/terraform-module-releaser@f742e14f90a7d35f0ab230cce7db22169151aaeb # v2.1.0Mutable tags like v2.1.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: techpivot/terraform-module-releaser@f742e14f90a7d35f0ab230cce7db22169151aaeb # v2.1.0
Score breakdown
Security (35%)75
Popularity (20%)41
Maintenance (30%)99
Reliability (15%)58