ActionRank
Check your actions

Code Owner Self Merge

Stale

OSS-Docs-Tools/code-owner-self-merge · MIT

A GitHub Action for letting CODEOWNERS merge PRs via green PR reviews

★ 62 starsLast commit 3 months agoLatest 1.6.8
D
48
/ 100
Security 55Maintenance 37Popularity 34Reliability 70

Security signals

OpenSSF Scorecard4.2 / 10
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: OSS-Docs-Tools/code-owner-self-merge@35e0f55671d1cebd7c0a53e199cb3a3a03678c2b # 1.6.8

Mutable tags like 1.6.8 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: OSS-Docs-Tools/code-owner-self-merge@35e0f55671d1cebd7c0a53e199cb3a3a03678c2b # 1.6.8

Score breakdown

Security (35%)55
Popularity (20%)34
Maintenance (30%)37
Reliability (15%)70