ActionRank
Check your actions

Semgrep Action

Abandoned

semgrep/semgrep-action · archived

This project is deprecated. Use https://github.com/returntocorp/semgrep instead

★ 76 starsLast commit 2 years agoLatest v1
F
35
/ 100
Security 75Maintenance 0Popularity 46Reliability 0

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: semgrep/semgrep-action@713efdd345f3035192eaa63f56867b88e63e4e5d # v1

Mutable tags like v1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: semgrep/semgrep-action@713efdd345f3035192eaa63f56867b88e63e4e5d # v1

Score breakdown

Security (35%)75
Popularity (20%)46
Maintenance (30%)0
Reliability (15%)0