PR Quiz

Abandoned

dkamm/pr-quiz · MIT

A GitHub Action that uses AI to generate a quiz from your pull request

★ 209 starsLast commit 1 year agoLatest v0.1.0

/ 100

Security signals

OpenSSF ScorecardNo data

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: dkamm/pr-quiz@8843130fd1e2fa711a112b6dded1947493471350 # v0.1.0

Mutable tags like v0.1.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: dkamm/pr-quiz@8843130fd1e2fa711a112b6dded1947493471350 # v0.1.0

Score breakdown

Security (35%)50

Popularity (20%)32

Maintenance (30%)26

Reliability (15%)70