ActionRank
Check your actions

GitHub Action for vsce

Abandoned

lannonbr/vsce-action · MIT

A GitHub Action to automate deploying VS Code extensions

★ 92 starsLast commit 1 year agoLatest 4.0.0
F
30
/ 100
Security 33Maintenance 5Popularity 34Reliability 70

Security signals

OpenSSF Scorecard2.1 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: lannonbr/vsce-action@510e61c5e9e6f33c0418ec5ff5fd36b1ced61e85 # 4.0.0

Mutable tags like 4.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: lannonbr/vsce-action@510e61c5e9e6f33c0418ec5ff5fd36b1ced61e85 # 4.0.0

Score breakdown

Security (35%)33
Popularity (20%)34
Maintenance (30%)5
Reliability (15%)70