vercel-ai

Stale

vercel/ai-action · ISC

GitHub Action to interact with different AI model providers.

★ 92 starsLast commit 8 months agoLatest v2.2.0

/ 100

Security signals

OpenSSF ScorecardNo data

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: vercel/ai-action@bd265252c9d1d8295ceda28dadb56ad9321c8ccc # v2.2.0

Mutable tags like v2.2.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: vercel/ai-action@bd265252c9d1d8295ceda28dadb56ad9321c8ccc # v2.2.0

Score breakdown

Security (35%)50

Popularity (20%)35

Maintenance (30%)50

Reliability (15%)58