Release notes generator
StaleDecathlon/release-notes-generator-action · Apache-2.0
Action to auto generate a release note based on your events
★ 125 starsLast commit 4 months agoLatest v3.1.7
D
50
/ 100
Security signals
OpenSSF Scorecard3.8 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: Decathlon/release-notes-generator-action@6763e8c460981d99ad576a53981f22fd4d0abacf # v3.1.7Mutable tags like v3.1.7 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: Decathlon/release-notes-generator-action@6763e8c460981d99ad576a53981f22fd4d0abacf # v3.1.7
Score breakdown
Security (35%)43
Popularity (20%)39
Maintenance (30%)55
Reliability (15%)70