ActionRank
Check your actions

Interactive Inputs

Abandoned

boasiHQ/interactive-inputs · MIT

Enable dynamic runtime inputs for your GitHub Actions workflows and composite actions (with support for file type inputs, slack/discord integration and more)

★ 48 starsLast commit 1 year agoLatest v2.4.0
F
36
/ 100
Security 50Maintenance 7Popularity 27Reliability 70

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: boasiHQ/interactive-inputs@a3091457e2a478f90be611c8f7d363f984cdbb3a # v2.4.0

Mutable tags like v2.4.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: boasiHQ/interactive-inputs@a3091457e2a478f90be611c8f7d363f984cdbb3a # v2.4.0

Score breakdown

Security (35%)50
Popularity (20%)27
Maintenance (30%)7
Reliability (15%)70