ActionRank
Check your actions

Github Tag Bump

Stale

anothrNick/github-tag-action · MIT

A Github Action to tag a repo on merge.

★ 878 starsLast commit 11 months agoLatest 1.75.0
D
50
/ 100
Security 49Maintenance 36Popularity 60Reliability 70

Security signals

OpenSSF Scorecard4.9 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # 1.75.0

Mutable tags like 1.75.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # 1.75.0

Score breakdown

Security (35%)49
Popularity (20%)60
Maintenance (30%)36
Reliability (15%)70