ActionRank

Build Tag Number

Actively maintained

onyxmueller/build-tag-number · MIT

Sequential build numbers for GitHub Actions workflows, stored as a Git tag - no extra commits.

56 starsLast commit 13 days agoLatest v1.1.0
C
60
/ 100
Security 36Maintenance 88Popularity 33Reliability 94

Security signals

OpenSSF Scorecard2.6 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: onyxmueller/build-tag-number@eab99bb956086490d1aa6b747dc265b5776e8eae # v1.1.0

Mutable tags like v1.1.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: onyxmueller/build-tag-number@eab99bb956086490d1aa6b747dc265b5776e8eae # v1.1.0

Score breakdown

Security (35%)36
Popularity (20%)33
Maintenance (30%)88
Reliability (15%)94