ActionRank

Auto-generate CHANGELOG

Actively maintained

BobAnkh/auto-generate-changelog · Apache-2.0

A Github Action to generate CHANGELOG automatically according to conventional commits. Feel free to contribute!

93 starsLast commit 2 months agoLatest v1.3.2
D
53
/ 100
Security 37Maintenance 74Popularity 37Reliability 70

Security signals

OpenSSF Scorecard2.9 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: BobAnkh/auto-generate-changelog@e8e1af1493032e025901cfdeb9ea6e67e4ffe208 # v1.3.2

Mutable tags like v1.3.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: BobAnkh/auto-generate-changelog@e8e1af1493032e025901cfdeb9ea6e67e4ffe208 # v1.3.2

Score breakdown

Security (35%)37
Popularity (20%)37
Maintenance (30%)74
Reliability (15%)70