ActionRank
Check your actions

pre-commit

Stale

pre-commit/action · MIT

a GitHub action to run `pre-commit`

★ 561 starsLast commit 11 months agoLatest v3.0.1
D
40
/ 100
Security 42Maintenance 17Popularity 50Reliability 70

Security signals

OpenSSF Scorecard3.6 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1

Mutable tags like v3.0.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1

Score breakdown

Security (35%)42
Popularity (20%)50
Maintenance (30%)17
Reliability (15%)70