Deploy Ghost Theme

Actively maintained

TryGhost/action-deploy-theme · MIT

GitHub Action that packages and deploys Ghost themes through the Ghost Admin API

★ 391 starsLast commit todayLatest v2.0.4

/ 100

Security signals

OpenSSF Scorecard7.0 / 10

SECURITY.md presentNo

Immutable releasesEnabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: TryGhost/action-deploy-theme@b1ff2a5eeac1d5438a0aab35eb996fe4010d889e # v2.0.4

Mutable tags like v2.0.4 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: TryGhost/action-deploy-theme@b1ff2a5eeac1d5438a0aab35eb996fe4010d889e # v2.0.4

Score breakdown

Security (35%)72

Popularity (20%)51

Maintenance (30%)92

Reliability (15%)70