Release with Changelog

Abandoned

fregante/release-with-changelog · MIT · archived

Creates GitHub releases for pushed tags, with the commit log as release body

★ 62 starsLast commit 3 years agoLatest v3.6.1

/ 100

Security signals

OpenSSF Scorecard3.4 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: fregante/release-with-changelog@779fd5e658f82e5b11b1c0a352a6838d3bd8f67f # v3.6.1

Mutable tags like v3.6.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: fregante/release-with-changelog@779fd5e658f82e5b11b1c0a352a6838d3bd8f67f # v3.6.1

Score breakdown

Security (35%)40

Popularity (20%)34

Maintenance (30%)0

Reliability (15%)0