ActionRank
Check your actions

Differential ShellCheck

Stale

redhat-plumbers-in-action/differential-shellcheck · GPL-3.0

🐚 GitHub Action for running ShellCheck differentially

★ 65 starsLast commit 3 months agoLatest v5.5.6
C
57
/ 100
Security 64Maintenance 54Popularity 38Reliability 70

Security signals

OpenSSF Scorecard7.3 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: redhat-plumbers-in-action/differential-shellcheck@d965e66ec0b3b2f821f75c8eff9b12442d9a7d1e # v5.5.6

Mutable tags like v5.5.6 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: redhat-plumbers-in-action/differential-shellcheck@d965e66ec0b3b2f821f75c8eff9b12442d9a7d1e # v5.5.6

Score breakdown

Security (35%)64
Popularity (20%)38
Maintenance (30%)54
Reliability (15%)70