bumpr - Bump version when merging Pull Request with specific labels

Abandoned

haya14busa/action-bumpr · MIT

💥 Bump semantic version tag on merging Pull Requests with specific lables.

★ 97 starsLast commit 1 year agoLatest v1.11.4

/ 100

Security signals

OpenSSF Scorecard3.1 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: haya14busa/action-bumpr@faf6f474bcb6174125cfc569f0b2e24cbf03d496 # v1.11.4

Mutable tags like v1.11.4 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: haya14busa/action-bumpr@faf6f474bcb6174125cfc569f0b2e24cbf03d496 # v1.11.4

Score breakdown

Security (35%)39

Popularity (20%)40

Maintenance (30%)16

Reliability (15%)70

Add this badge to your README

ActionRank grade badge for bumpr - Bump version when merging Pull Request with specific labels

Markdown

[![ActionRank](https://actionrank.dev/api/badge/haya14busa-action-bumpr)](https://actionrank.dev/actions/haya14busa-action-bumpr)

HTML version

HTML

<a href="https://actionrank.dev/actions/haya14busa-action-bumpr"><img src="https://actionrank.dev/api/badge/haya14busa-action-bumpr" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

bumpr - Bump version when merging Pull Request with specific labels

Security signals

How to use it safely

Score breakdown

Add this badge to your README

Get alerts for bumpr - Bump version when merging Pull Request with specific labels