Github Release
Actively maintainedelgohr/Github-Release-Action · MIT
Publish Github releases in an action
★ 216 starsLast commit 16 days agoLatest 11781188606
D
53
/ 100
Security signals
OpenSSF Scorecard4.4 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: elgohr/Github-Release-Action@c5ea99036abb741a89f8bf1f2cd7fba845e3313a # 11781188606Mutable tags like 11781188606 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: elgohr/Github-Release-Action@c5ea99036abb741a89f8bf1f2cd7fba845e3313a # 11781188606
Score breakdown
Security (35%)46
Popularity (20%)43
Maintenance (30%)63
Reliability (15%)60