ActionRank
Check your actions

WordPress Plugin Deploy

Abandoned

10up/action-wordpress-plugin-deploy · MIT

Deploy your plugin to the WordPress.org repository using GitHub Actions

★ 658 starsLast commit 1 year agoLatest 2.3.0
D
47
/ 100
Security 56Maintenance 20Popularity 56Reliability 70

Security signals

OpenSSF Scorecard6.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: 10up/action-wordpress-plugin-deploy@54bd289b8525fd23a5c365ec369185f2966529c2 # 2.3.0

Mutable tags like 2.3.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: 10up/action-wordpress-plugin-deploy@54bd289b8525fd23a5c365ec369185f2966529c2 # 2.3.0

Score breakdown

Security (35%)56
Popularity (20%)56
Maintenance (30%)20
Reliability (15%)70