Pull Request Action

Abandoned

vsoch/pull-request-action · MIT

open a pull request when a branch is pushed or updated

★ 173 starsLast commit 1 year agoLatest 1.1.1

/ 100

Security signals

OpenSSF Scorecard2.7 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: vsoch/pull-request-action@882391869b75196e039a732df05085312c456995 # 1.1.1

Mutable tags like 1.1.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: vsoch/pull-request-action@882391869b75196e039a732df05085312c456995 # 1.1.1

Score breakdown

Security (35%)36

Popularity (20%)44

Maintenance (30%)13

Reliability (15%)70