ActionRank
Check your actions

Actions Tagger

Abandoned

Actions-R-Us/actions-tagger · MIT

A meta-action to keep your action versions up-to-date

★ 126 starsLast commit 2 years agoLatest v2.1.0-rc5
F
33
/ 100
Security 39Maintenance 4Popularity 39Reliability 70

Security signals

OpenSSF Scorecard3.1 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: Actions-R-Us/actions-tagger@6cbe5c332443bd074f7472fc9868f2932c4afa79 # v2.1.0-rc5

Mutable tags like v2.1.0-rc5 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: Actions-R-Us/actions-tagger@6cbe5c332443bd074f7472fc9868f2932c4afa79 # v2.1.0-rc5

Score breakdown

Security (35%)39
Popularity (20%)39
Maintenance (30%)4
Reliability (15%)70