ActionRank
Check your actions

Cache

Actively maintained

actions/cache · MIT

Cache dependencies and build outputs in GitHub Actions

★ 5.5k starsLast commit 17 days agoLatest v5.1.0
B
72
/ 100
Security 58Maintenance 96Popularity 77Reliability 49

Security signals

OpenSSF Scorecard6.4 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0

Mutable tags like v5.1.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0

Score breakdown

Security (35%)58
Popularity (20%)77
Maintenance (30%)96
Reliability (15%)49