ActionRank
Check your actions

Workflow Telemetry

Abandoned

catchpoint/workflow-telemetry-action · Apache-2.0

Github action to collect metrics (CPU, memory, I/O, etc ...) from your workflows to help you debug and optimize your CI/CD pipeline

★ 410 starsLast commit 2 years agoLatest v2.0.0
F
38
/ 100
Security 50Maintenance 4Popularity 46Reliability 70

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: catchpoint/workflow-telemetry-action@94c3c3d9567a0205de6da68a76c428ce4e769af1 # v2.0.0

Mutable tags like v2.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: catchpoint/workflow-telemetry-action@94c3c3d9567a0205de6da68a76c428ce4e769af1 # v2.0.0

Score breakdown

Security (35%)50
Popularity (20%)46
Maintenance (30%)4
Reliability (15%)70