ActionRank
Check your actions

rworkflows

Actively maintained

neurogenomics/rworkflows

Continuous integration for R packages. 🔀 Automates testing ✅, documentation website building 📦, & containerised deployment 🐳.

★ 90 starsLast commit 2 months agoLatest v1.0.12
C
59
/ 100
Security 46Maintenance 76Popularity 36Reliability 84

Security signals

OpenSSF Scorecard4.3 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: neurogenomics/rworkflows@6aaf49348859a96eea744b1907b1fe850e3ead5e # v1.0.12

Mutable tags like v1.0.12 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: neurogenomics/rworkflows@6aaf49348859a96eea744b1907b1fe850e3ead5e # v1.0.12

Score breakdown

Security (35%)46
Popularity (20%)36
Maintenance (30%)76
Reliability (15%)84