ActionRank
Check your actions

Infracost Actions

Actively maintained

infracost/actions · Apache-2.0

GitHub Action for Infracost. See cloud cost estimates for Terraform in pull requests. 💰📉 Love your cloud bill!

★ 274 starsLast commit 8 days agoLatest scanner/v0.2.5
C
60
/ 100
Security 50Maintenance 92Popularity 48Reliability 38

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: infracost/actions@c5006bf6dc9a08b37d79fbd2a723032ccb8262cb # scanner/v0.2.5

Mutable tags like scanner/v0.2.5 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: infracost/actions@c5006bf6dc9a08b37d79fbd2a723032ccb8262cb # scanner/v0.2.5

Score breakdown

Security (35%)50
Popularity (20%)48
Maintenance (30%)92
Reliability (15%)38