Install development tools

Actively maintained

taiki-e/install-action · Apache-2.0

GitHub Action for installing development tools (mainly from GitHub Releases).

★ 527 starsLast commit todayLatest zola

/ 100

Security signals

OpenSSF Scorecard7.3 / 10

SECURITY.md presentNo

Immutable releasesEnabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: taiki-e/install-action@ca5fd14e39518df71ed853c405505604365020a7 # zola

Mutable tags like zola can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: taiki-e/install-action@ca5fd14e39518df71ed853c405505604365020a7 # zola

Score breakdown

Security (35%)74

Popularity (20%)59

Maintenance (30%)100

Reliability (15%)70