ActionRank

Deploy WordPress to WP Engine

Stale

wpengine/github-action-wpe-site-deploy · MIT

A GitHub Action to deploy code directly to WP Engine.

204 starsLast commit 3 months agoLatest v3.2.9
C
58
/ 100
Security 61Maintenance 55Popularity 46Reliability 70

Security signals

OpenSSF Scorecard5.2 / 10
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: wpengine/github-action-wpe-site-deploy@7bdbfb62eb657ae92afb91cb889d9c3fb36ef6c0 # v3.2.9

Mutable tags like v3.2.9 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: wpengine/github-action-wpe-site-deploy@7bdbfb62eb657ae92afb91cb889d9c3fb36ef6c0 # v3.2.9

Score breakdown

Security (35%)61
Popularity (20%)46
Maintenance (30%)55
Reliability (15%)70