LGTM Reaction

Abandoned

micnncim/action-lgtm-reaction · Apache-2.0 · archived

GitHub Action to send LGTM reaction

★ 81 starsLast commit 5 years agoLatest v0.6.0

/ 100

Security signals

OpenSSF Scorecard3.1 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: micnncim/action-lgtm-reaction@4b0c3ab3be53fcab2e4597abe455ec30158554bb # v0.6.0

Mutable tags like v0.6.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: micnncim/action-lgtm-reaction@4b0c3ab3be53fcab2e4597abe455ec30158554bb # v0.6.0

Score breakdown

Security (35%)39

Popularity (20%)33

Maintenance (30%)0

Reliability (15%)0