ActionRank
Check your actions

Conventional Changelog Action

Actively maintained

TriPSs/conventional-changelog-action · MIT

Github Action that generates a changelog with the Conventional Changelog CLI

★ 340 starsLast commit 24 days agoLatest v6.4.0
C
65
/ 100
Security 48Maintenance 92Popularity 52Reliability 70

Security signals

OpenSSF Scorecard4.7 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: TriPSs/conventional-changelog-action@ee43def3241429afddab215ba89090cbf64fb45c # v6.4.0

Mutable tags like v6.4.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: TriPSs/conventional-changelog-action@ee43def3241429afddab215ba89090cbf64fb45c # v6.4.0

Score breakdown

Security (35%)48
Popularity (20%)52
Maintenance (30%)92
Reliability (15%)70