Workflow Keepalive

Stale

liskin/gh-workflow-keepalive · MIT

GitHub Action to prevent GitHub from disabling scheduled workflows due to repository inactivity.

★ 83 starsLast commit 11 months agoLatest v1.2.1

/ 100

Security signals

OpenSSF ScorecardNo data

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: liskin/gh-workflow-keepalive@f72ff1a1336129f29bf0166c0fd0ca6cf1bcb38c # v1.2.1

Mutable tags like v1.2.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: liskin/gh-workflow-keepalive@f72ff1a1336129f29bf0166c0fd0ca6cf1bcb38c # v1.2.1

Score breakdown

Security (35%)50

Popularity (20%)30

Maintenance (30%)17

Reliability (15%)70