ActionRank
Check your actions

Paths Changes Filter

Actively maintained

dorny/paths-filter · MIT

Conditionally run actions based on files modified by PR, feature branch or pushed commits

★ 3.3k starsLast commit yesterdayLatest v4.0.2
C
66
/ 100
Security 48Maintenance 92Popularity 64Reliability 58

Security signals

OpenSSF Scorecard4.6 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2

Mutable tags like v4.0.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2

Score breakdown

Security (35%)48
Popularity (20%)64
Maintenance (30%)92
Reliability (15%)58