ActionRank
Check your actions

Hugo on Fire

Abandoned

wajahatkarim3/hugo-on-fire · Apache-2.0

🔥 A Github Action to build a Hugo site and deploy it on Firebase Hosting.

★ 60 starsLast commit 4 years agoLatest 0.99.1
F
28
/ 100
Security 31Maintenance 4Popularity 28Reliability 70

Security signals

OpenSSF Scorecard1.8 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: wajahatkarim3/hugo-on-fire@3bcfe00af5ab4c3d8d57b8d1270f6abe87218ca0 # 0.99.1

Mutable tags like 0.99.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: wajahatkarim3/hugo-on-fire@3bcfe00af5ab4c3d8d57b8d1270f6abe87218ca0 # 0.99.1

Score breakdown

Security (35%)31
Popularity (20%)28
Maintenance (30%)4
Reliability (15%)70