ActionRank

Lock Threads

Actively maintained

dessant/lock-threads · MIT

GitHub Action that locks closed issues, pull requests and discussions after a period of inactivity

331 starsLast commit 1 months agoLatest v6.0.2
C
62
/ 100
Security 50Maintenance 87Popularity 39Reliability 70

Security signals

OpenSSF Scorecard5.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: dessant/lock-threads@89ae32b08ed1a541efecbab17912962a5e38981c # v6.0.2

Mutable tags like v6.0.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: dessant/lock-threads@89ae32b08ed1a541efecbab17912962a5e38981c # v6.0.2

Score breakdown

Security (35%)50
Popularity (20%)39
Maintenance (30%)87
Reliability (15%)70