ActionRank

Elastic Cloud Control (ecctl) tool installer

Actively maintained

yokawasa/action-setup-ecctl · MIT

A GitHub action that install a specific version of ecctl (Elastic Cloud control tool) and cache it on the runner. Please [✩Star] if you're using it!

4 starsLast commit 11 days agoLatest v0.4.6
C
55
/ 100
Security 40Maintenance 91Popularity 15Reliability 70

Security signals

OpenSSF Scorecard3.3 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: yokawasa/action-setup-ecctl@cecc10b71f8f1dd627f062d2646d5a07e912874b # v0.4.6

Mutable tags like v0.4.6 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: yokawasa/action-setup-ecctl@cecc10b71f8f1dd627f062d2646d5a07e912874b # v0.4.6

Score breakdown

Security (35%)40
Popularity (20%)15
Maintenance (30%)91
Reliability (15%)70