ActionRank

Bad commit message blocker

Actively maintained

platisd/bad-commit-message-blocker · MIT

Inhibits commits with bad messages from getting merged

65 starsLast commit 13 days agoLatest v1.1.0
D
46
/ 100
Security 37Maintenance 56Popularity 31Reliability 70

Security signals

OpenSSF Scorecard2.8 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: platisd/bad-commit-message-blocker@d01cb04300f1e327c3f19b61a9b419b19f684ede # v1.1.0

Mutable tags like v1.1.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: platisd/bad-commit-message-blocker@d01cb04300f1e327c3f19b61a9b419b19f684ede # v1.1.0

Score breakdown

Security (35%)37
Popularity (20%)31
Maintenance (30%)56
Reliability (15%)70

Add this badge to your README

ActionRank grade badge for Bad commit message blocker
Markdown
[![ActionRank](https://actionrank.dev/api/badge/platisd-bad-commit-message-blocker)](https://actionrank.dev/actions/platisd-bad-commit-message-blocker)
HTML version
HTML
<a href="https://actionrank.dev/actions/platisd-bad-commit-message-blocker"><img src="https://actionrank.dev/api/badge/platisd-bad-commit-message-blocker" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

Get alerts for Bad commit message blocker

We'll email you only if Bad commit message blocker becomes abandoned or a new advisory is published. Unsubscribe any time. How we handle your address