ActionRank
Check your actions

Actions Ecosystem Action Get Latest Tag

Abandoned

actions-ecosystem/action-get-latest-tag · Apache-2.0

✨ GitHub Action to get a latest Git tag

★ 58 starsLast commit 4 years agoLatest v1.6.0
F
31
/ 100
Security 37Maintenance 4Popularity 30Reliability 70

Security signals

OpenSSF Scorecard2.9 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: actions-ecosystem/action-get-latest-tag@b7c32daec3395a9616f88548363a42652b22d435 # v1.6.0

Mutable tags like v1.6.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: actions-ecosystem/action-get-latest-tag@b7c32daec3395a9616f88548363a42652b22d435 # v1.6.0

Score breakdown

Security (35%)37
Popularity (20%)30
Maintenance (30%)4
Reliability (15%)70