ActionRank

Get Current Pull Request

Stale

8BitJonny/gh-get-current-pr · GPL-3.0

Github Action for getting all the details about the current Pull Request if the commit is part of one

128 starsLast commit 10 months agoLatest 4.0.0
D
47
/ 100
Security 49Maintenance 37Popularity 40Reliability 70

Security signals

OpenSSF Scorecard4.8 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: 8BitJonny/gh-get-current-pr@4056877062a1f3b624d5d4c2bedefa9cf51435c9 # 4.0.0

Mutable tags like 4.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: 8BitJonny/gh-get-current-pr@4056877062a1f3b624d5d4c2bedefa9cf51435c9 # 4.0.0

Score breakdown

Security (35%)49
Popularity (20%)40
Maintenance (30%)37
Reliability (15%)70