Publish Conda

Abandoned

fcakyon/conda-publish-action · MIT

Github Action to deploy conda package to Anaconda repository

★ 26 starsLast commit 6 years agoLatest v1.3

/ 100

Security signals

OpenSSF Scorecard1.8 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: fcakyon/conda-publish-action@9d10526d5e17f2b301879346f1ac2c165e36dd1c # v1.3

Mutable tags like v1.3 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: fcakyon/conda-publish-action@9d10526d5e17f2b301879346f1ac2c165e36dd1c # v1.3

Score breakdown

Security (35%)31

Popularity (20%)26

Maintenance (30%)4

Reliability (15%)30