ActionRank

Pull request labeler

Abandoned

Decathlon/pull-request-labeler-action · Apache-2.0 · archived

Github action to label your pull requests auto-magically (using committed files)

99 starsLast commit 3 years agoLatest v2.0.0
F
23
/ 100
Security 44Maintenance 0Popularity 37Reliability 0

Security signals

OpenSSF Scorecard4.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: Decathlon/pull-request-labeler-action@640902e423687550a9384c50b7c6782100e83c42 # v2.0.0

Mutable tags like v2.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: Decathlon/pull-request-labeler-action@640902e423687550a9384c50b7c6782100e83c42 # v2.0.0

Score breakdown

Security (35%)44
Popularity (20%)37
Maintenance (30%)0
Reliability (15%)0

Add this badge to your README

ActionRank grade badge for Pull request labeler
Markdown
[![ActionRank](https://actionrank.dev/api/badge/decathlon-pull-request-labeler-action)](https://actionrank.dev/actions/decathlon-pull-request-labeler-action)
HTML version
HTML
<a href="https://actionrank.dev/actions/decathlon-pull-request-labeler-action"><img src="https://actionrank.dev/api/badge/decathlon-pull-request-labeler-action" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

Get alerts for Pull request labeler

We'll email you only if Pull request labeler becomes abandoned or a new advisory is published. Unsubscribe any time. How we handle your address