ActionRank

Backlog Notify

Actively maintained

bicstone/backlog-notify · MIT

GitHub 上のプッシュとプルリクエストを Backlog 課題に連携する GitHub Action です。

89 starsLast commit todayLatest v6.1.1
C
69
/ 100
Security 65Maintenance 92Popularity 39Reliability 70

Security signals

OpenSSF Scorecard5.8 / 10
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: bicstone/backlog-notify@bed3fe95e306428ee0992a90a1f5bbfc9c9839d2 # v6.1.1

Mutable tags like v6.1.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: bicstone/backlog-notify@bed3fe95e306428ee0992a90a1f5bbfc9c9839d2 # v6.1.1

Score breakdown

Security (35%)65
Popularity (20%)39
Maintenance (30%)92
Reliability (15%)70