ActionRank
Check your actions

Vercel Action

Stale

amondnet/vercel-action · MIT

This action make a deployment with github actions instead of Vercel builder.

★ 761 starsLast commit 3 months agoLatest v42.3.0
C
62
/ 100
Security 46Maintenance 68Popularity 58Reliability 96

Security signals

OpenSSF Scorecard4.3 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: amondnet/vercel-action@de09aeac2ace6599ec9b11ef87558759a496bac4 # v42.3.0

Mutable tags like v42.3.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: amondnet/vercel-action@de09aeac2ace6599ec9b11ef87558759a496bac4 # v42.3.0

Score breakdown

Security (35%)46
Popularity (20%)58
Maintenance (30%)68
Reliability (15%)96