ref-to-tag

Abandoned

ankitvgupta/ref-to-tag-action

Extract a docker-compatible tag name from a github ref

★ 5 starsLast commit 3 years agoLatest v1.0.1

/ 100

Security signals

OpenSSF ScorecardNo data

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: ankitvgupta/ref-to-tag-action@72702fa45eec7c546c9ea82c8c08de13d0132e1b # v1.0.1

Mutable tags like v1.0.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: ankitvgupta/ref-to-tag-action@72702fa45eec7c546c9ea82c8c08de13d0132e1b # v1.0.1

Score breakdown

Security (35%)50

Popularity (20%)16

Maintenance (30%)4

Reliability (15%)70