ActionRank

Publish VS Code Extension

Actively maintained

HaaLeo/publish-vscode-extension · MIT

GitHub action to publish your VS Code Extension to the Open VSX Registry or Visual Studio Marketplace.

★ 261 starsLast commit 3 days agoLatest v2.1.0
C
61
/ 100
Security 38Maintenance 84Popularity 44Reliability 92

Security signals

OpenSSF Scorecard3.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: HaaLeo/publish-vscode-extension@1b8df468b849f76a143b8c18bf0ffa2075398d12 # v2.1.0

Mutable tags like v2.1.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: HaaLeo/publish-vscode-extension@1b8df468b849f76a143b8c18bf0ffa2075398d12 # v2.1.0

Score breakdown

Security (35%)38
Popularity (20%)44
Maintenance (30%)84
Reliability (15%)92

Add this badge to your README

ActionRank grade badge for Publish VS Code Extension
Markdown
[![ActionRank](https://actionrank.dev/api/badge/haaleo-publish-vscode-extension)](https://actionrank.dev/actions/haaleo-publish-vscode-extension)
HTML version
HTML
<a href="https://actionrank.dev/actions/haaleo-publish-vscode-extension"><img src="https://actionrank.dev/api/badge/haaleo-publish-vscode-extension" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

Get alerts for Publish VS Code Extension

We'll email you only if Publish VS Code Extension becomes abandoned or a new advisory is published. Unsubscribe any time. How we handle your address