ActionRank
Check your actions

Autopopulate your contribution graph

Actively maintained

bcanseco/github-contribution-graph-action · MIT

🙈 This GitHub action will automatically push empty commits to one of your repositories.

★ 251 starsLast commit 2 months agoLatest 2.0.2
D
48
/ 100
Security 47Maintenance 45Popularity 36Reliability 70

Security signals

OpenSSF Scorecard4.5 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: bcanseco/github-contribution-graph-action@74527e76090be2a3ff099216fcbbc46a8931497c # 2.0.2

Mutable tags like 2.0.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: bcanseco/github-contribution-graph-action@74527e76090be2a3ff099216fcbbc46a8931497c # 2.0.2

Score breakdown

Security (35%)47
Popularity (20%)36
Maintenance (30%)45
Reliability (15%)70