ActionRank
Check your actions

Bicep Deploy

Actively maintained

Azure/bicep-deploy · MIT

Azure Deploy GitHub Action

★ 65 starsLast commit 11 days agoLatest v2.3.0
B
73
/ 100
Security 75Maintenance 87Popularity 38Reliability 84

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: Azure/bicep-deploy@66910e9c5c7733c33a1cd605030d02234b3bc4ed # v2.3.0

Mutable tags like v2.3.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: Azure/bicep-deploy@66910e9c5c7733c33a1cd605030d02234b3bc4ed # v2.3.0

Score breakdown

Security (35%)75
Popularity (20%)38
Maintenance (30%)87
Reliability (15%)84