ActionRank

GitHub Actions Version Updater

Actively maintained

saadmk11/github-actions-version-updater · MIT

Keeps GitHub Actions version pins up to date, available as a GitHub Action or as the update-gha CLI via PyPI package.

★ 103 starsLast commit 17 days agoLatest v1.0.1
C
62
/ 100
Security 48Maintenance 88Popularity 41Reliability 70

Security signals

OpenSSF Scorecard4.7 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: saadmk11/github-actions-version-updater@a5ab9b51373a6dbfd2732a985e60ef23e172792a # v1.0.1

Mutable tags like v1.0.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: saadmk11/github-actions-version-updater@a5ab9b51373a6dbfd2732a985e60ef23e172792a # v1.0.1

Score breakdown

Security (35%)48
Popularity (20%)41
Maintenance (30%)88
Reliability (15%)70

Add this badge to your README

ActionRank grade badge for GitHub Actions Version Updater
Markdown
[![ActionRank](https://actionrank.dev/api/badge/saadmk11-github-actions-version-updater)](https://actionrank.dev/actions/saadmk11-github-actions-version-updater)
HTML version
HTML
<a href="https://actionrank.dev/actions/saadmk11-github-actions-version-updater"><img src="https://actionrank.dev/api/badge/saadmk11-github-actions-version-updater" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

Get alerts for GitHub Actions Version Updater

We'll email you only if GitHub Actions Version Updater becomes abandoned or a new advisory is published. Unsubscribe any time. How we handle your address