ActionRank
Check your actions

Azure WebApp

Stale

azure/webapps-deploy · MIT

Enable GitHub developers to deploy to Azure WebApps using GitHub Actions

★ 334 starsLast commit 4 months agoLatest v2
C
69
/ 100
Security 75Maintenance 64Popularity 54Reliability 84

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: azure/webapps-deploy@5cfb776471c748b351e1ebf5770e208a54ace016 # v2

Mutable tags like v2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: azure/webapps-deploy@5cfb776471c748b351e1ebf5770e208a54ace016 # v2

Score breakdown

Security (35%)75
Popularity (20%)54
Maintenance (30%)64
Reliability (15%)84