ActionRank
Check your actions

Set up gcloud Cloud SDK environment

Stale

google-github-actions/setup-gcloud · Apache-2.0

A GitHub Action for installing and configuring the gcloud CLI.

★ 1.9k starsLast commit 3 months agoLatest v3.0.1
C
61
/ 100
Security 55Maintenance 57Popularity 65Reliability 80

Security signals

OpenSSF Scorecard5.9 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db # v3.0.1

Mutable tags like v3.0.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db # v3.0.1

Score breakdown

Security (35%)55
Popularity (20%)65
Maintenance (30%)57
Reliability (15%)80