SAML.to Assume AWS Role

Abandoned

saml-to/assume-aws-role-action

Assume AWS IAM Roles using SAML.to in GitHub Actions

★ 182 starsLast commit 3 years agoLatest 1.0.13

/ 100

Security signals

OpenSSF Scorecard2.7 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: saml-to/assume-aws-role-action@b7d7ce65384c7d07463e2313b71ccf8b35a147e0 # 1.0.13

Mutable tags like 1.0.13 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: saml-to/assume-aws-role-action@b7d7ce65384c7d07463e2313b71ccf8b35a147e0 # 1.0.13

Score breakdown

Security (35%)36

Popularity (20%)34

Maintenance (30%)4

Reliability (15%)70