ActionRank
Check your actions

werf

Actively maintained

werf/actions · Apache-2.0

Set of actions for implementing CI/CD with werf and GitHub Actions

★ 85 starsLast commit 2 months agoLatest marketplace
D
40
/ 100
Security 40Maintenance 47Popularity 37Reliability 30

Security signals

OpenSSF Scorecard3.4 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: werf/actions@e5e6d49cdd9029348d3f34519996bae8d3f7cee8 # marketplace

Mutable tags like marketplace can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: werf/actions@e5e6d49cdd9029348d3f34519996bae8d3f7cee8 # marketplace

Score breakdown

Security (35%)40
Popularity (20%)37
Maintenance (30%)47
Reliability (15%)30