ActionRank
Check your actions

Commit Linter

Abandoned

wagoid/commitlint-github-action · MIT

Lints Pull Request commits with commitlint

★ 401 starsLast commit 1 year agoLatest v6.2.1
F
29
/ 100
Security 46Maintenance 9Popularity 50Reliability 0

Security signals

OpenSSF Scorecard3.6 / 10
SECURITY.md presentNo
Immutable releasesUnknown
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: wagoid/commitlint-github-action@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed # v6.2.1

Mutable tags like v6.2.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: wagoid/commitlint-github-action@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed # v6.2.1

Score breakdown

Security (35%)46
Popularity (20%)50
Maintenance (30%)9
Reliability (15%)0