ActionRank
Check your actions

Actions Ecosystem Action Release Label

Abandoned

actions-ecosystem/action-release-label · Apache-2.0

🏷️ GitHub Action to output a semver update level from a pull request release label

★ 52 starsLast commit 4 years agoLatest v1.2.0
F
30
/ 100
Security 37Maintenance 4Popularity 25Reliability 70

Security signals

OpenSSF Scorecard2.8 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: actions-ecosystem/action-release-label@1c7ef83d383a57bf253a2e2e9dfe1b55f445ae15 # v1.2.0

Mutable tags like v1.2.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: actions-ecosystem/action-release-label@1c7ef83d383a57bf253a2e2e9dfe1b55f445ae15 # v1.2.0

Score breakdown

Security (35%)37
Popularity (20%)25
Maintenance (30%)4
Reliability (15%)70