ActionRank
Check your actions

Deploy to Cloud Functions

Stale

google-github-actions/deploy-cloud-functions · Apache-2.0

A GitHub Action that deploys source code to Google Cloud Functions.

★ 334 starsLast commit 11 months agoLatest v4.0.0
D
52
/ 100
Security 54Maintenance 37Popularity 49Reliability 84

Security signals

OpenSSF Scorecard5.7 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: google-github-actions/deploy-cloud-functions@ab10d6b9be21630aafc15ced4c464c16cd6640d6 # v4.0.0

Mutable tags like v4.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: google-github-actions/deploy-cloud-functions@ab10d6b9be21630aafc15ced4c464c16cd6640d6 # v4.0.0

Score breakdown

Security (35%)54
Popularity (20%)49
Maintenance (30%)37
Reliability (15%)84