ActionRank
Check your actions

Auto Update

Abandoned

chinthakagodawita/autoupdate · MIT

A GitHub Action that auto-updates pull requests branches, whenever changes are pushed to their destination branch.

★ 216 starsLast commit 3 years agoLatest v1.7.0
F
35
/ 100
Security 42Maintenance 4Popularity 43Reliability 70

Security signals

OpenSSF Scorecard3.7 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: chinthakagodawita/autoupdate@0707656cd062a3b0cf8fa9b2cda1d1404d74437e # v1.7.0

Mutable tags like v1.7.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: chinthakagodawita/autoupdate@0707656cd062a3b0cf8fa9b2cda1d1404d74437e # v1.7.0

Score breakdown

Security (35%)42
Popularity (20%)43
Maintenance (30%)4
Reliability (15%)70