Deploy to App Engine

Stale

google-github-actions/deploy-appengine

A GitHub Action that deploys source code to Google App Engine.

★ 281 starsLast commit 11 months agoLatest v3.0.1

/ 100

Security signals

OpenSSF Scorecard5.5 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: google-github-actions/deploy-appengine@54d5fc7167ec790eb0233905e3cef384221b4619 # v3.0.1

Mutable tags like v3.0.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: google-github-actions/deploy-appengine@54d5fc7167ec790eb0233905e3cef384221b4619 # v3.0.1

Score breakdown

Security (35%)53

Popularity (20%)48

Maintenance (30%)37

Reliability (15%)84