ActionRank
Check your actions

actions--access-token

Actively maintained

qoomon/actions--access-token · MIT

Get rid of personal access tokens (PAT) and credential management, use temporary GitHub Application access tokens instead!

★ 199 starsLast commit 5 days agoLatest v3.4.0
B
75
/ 100
Security 75Maintenance 99Popularity 42Reliability 70

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: qoomon/actions--access-token@4a318f2079e61db2ee0fe6a9073508366d90927c # v3.4.0

Mutable tags like v3.4.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: qoomon/actions--access-token@4a318f2079e61db2ee0fe6a9073508366d90927c # v3.4.0

Score breakdown

Security (35%)75
Popularity (20%)42
Maintenance (30%)99
Reliability (15%)70