Labeler

Actively maintained

actions/labeler · MIT

An action for automatically labelling pull requests

★ 2.5k starsLast commit 2 days agoLatest v7.0.0

/ 100

Security signals

OpenSSF Scorecard5.2 / 10

SECURITY.md presentNo

Immutable releasesEnabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v7.0.0

Mutable tags like v7.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: actions/labeler@bf12e9b00b37c5c0ca2b87b79b2daf7891dbda13 # v7.0.0

Score breakdown

Security (35%)61

Popularity (20%)67

Maintenance (30%)92

Reliability (15%)58