ActionRank
Check your actions

Repo Lockdown

Actively maintained

dessant/repo-lockdown · MIT

GitHub Action that immediately closes and locks issues and pull requests

★ 146 starsLast commit 1 months agoLatest v5.0.2
C
61
/ 100
Security 52Maintenance 87Popularity 30Reliability 70

Security signals

OpenSSF Scorecard5.3 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: dessant/repo-lockdown@17c2cc64a91eff426f242b05dd523c6f098889b6 # v5.0.2

Mutable tags like v5.0.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: dessant/repo-lockdown@17c2cc64a91eff426f242b05dd523c6f098889b6 # v5.0.2

Score breakdown

Security (35%)52
Popularity (20%)30
Maintenance (30%)87
Reliability (15%)70