ActionRank
Check your actions

Create Pull Request

Actively maintained

peter-evans/create-pull-request · MIT

A GitHub action to create a pull request for changes to your repository in the actions workspace

★ 2.8k starsLast commit todayLatest v8.1.1
B
72
/ 100
Security 61Maintenance 95Popularity 65Reliability 58

Security signals

OpenSSF Scorecard5.2 / 10
SECURITY.md presentNo
Immutable releasesEnabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1

Mutable tags like v8.1.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1

Score breakdown

Security (35%)61
Popularity (20%)65
Maintenance (30%)95
Reliability (15%)58