ActionRank
Check your actions

Git Release

Abandoned

anton-yurchenko/git-release · MIT

Publish a GitHub Release with Assets and Changelog

★ 184 starsLast commit 1 year agoLatest v6.0.0
F
36
/ 100
Security 42Maintenance 8Popularity 41Reliability 70

Security signals

OpenSSF Scorecard3.7 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: anton-yurchenko/git-release@ec9c5b5c36b27eaffc628785b9183eae54601200 # v6.0.0

Mutable tags like v6.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: anton-yurchenko/git-release@ec9c5b5c36b27eaffc628785b9183eae54601200 # v6.0.0

Score breakdown

Security (35%)42
Popularity (20%)41
Maintenance (30%)8
Reliability (15%)70