Automatic Releases

Abandoned

marvinpinto/action-automatic-releases · MIT · archived

READONLY: Auto-generated mirror for https://github.com/marvinpinto/actions/tree/master/packages/automatic-releases

★ 778 starsLast commit 4 years agoLatest latest

/ 100

Security signals

OpenSSF Scorecard2.0 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: marvinpinto/action-automatic-releases@d68defdd11f9dcc7f52f35c1b7c236ee7513bcc1 # latest

Mutable tags like latest can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: marvinpinto/action-automatic-releases@d68defdd11f9dcc7f52f35c1b7c236ee7513bcc1 # latest

Score breakdown

Security (35%)32

Popularity (20%)39

Maintenance (30%)0

Reliability (15%)0