ActionRank
Check your actions

Latest tag

Actively maintained

EndBug/latest-tag · MIT

Automatically generate & update a "latest" tag for your releases

★ 65 starsLast commit 20 days agoLatest v1.6.3
C
56
/ 100
Security 39Maintenance 83Popularity 37Reliability 70

Security signals

OpenSSF Scorecard3.1 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: EndBug/latest-tag@8fcae8848c1e23fd8212258f69a9619bc62cad67 # v1.6.3

Mutable tags like v1.6.3 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: EndBug/latest-tag@8fcae8848c1e23fd8212258f69a9619bc62cad67 # v1.6.3

Score breakdown

Security (35%)39
Popularity (20%)37
Maintenance (30%)83
Reliability (15%)70