ActionRank
Check your actions

command-action

Stale

github/command · MIT

IssueOps commands in GitHub Actions

★ 166 starsLast commit 8 months agoLatest v2.0.3
D
50
/ 100
Security 50Maintenance 45Popularity 40Reliability 70

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: github/command@3442f3fa1efe01bdb024b157083c337902d17372 # v2.0.3

Mutable tags like v2.0.3 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: github/command@3442f3fa1efe01bdb024b157083c337902d17372 # v2.0.3

Score breakdown

Security (35%)50
Popularity (20%)40
Maintenance (30%)45
Reliability (15%)70