Blog Post Workflow

Stale

gautamkrishnar/blog-post-workflow · AGPL-3.0

Show your latest blog posts from any sources or StackOverflow activity or Youtube Videos on your GitHub profile/project readme automatically using the RSS feed

★ 3.4k starsLast commit 3 months agoLatest 1.9.6

/ 100

Security signals

OpenSSF Scorecard4.2 / 10

SECURITY.md presentYes

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: gautamkrishnar/blog-post-workflow@2786e54a01b71aec80a5118c2bd6b5044e842597 # 1.9.6

Mutable tags like 1.9.6 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: gautamkrishnar/blog-post-workflow@2786e54a01b71aec80a5118c2bd6b5044e842597 # 1.9.6

Score breakdown

Security (35%)55

Popularity (20%)64

Maintenance (30%)58

Reliability (15%)70