ActionRank
Check your actions

Checkout

Actively maintained

actions/checkout · MIT

Action for checking out a repo

★ 8.6k starsLast commit 12 days agoLatest v7.0.1
B
72
/ 100
Security 61Maintenance 96Popularity 73Reliability 49

Security signals

OpenSSF Scorecard6.9 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

Mutable tags like v7.0.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

Score breakdown

Security (35%)61
Popularity (20%)73
Maintenance (30%)96
Reliability (15%)49