Track TODO Action

Stale

ribtoks/tdg-github-action · MIT

GitHub action for project management using TODO comments

★ 71 starsLast commit 3 months agoLatest v0.4.17-beta

/ 100

Security signals

OpenSSF Scorecard3.2 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: ribtoks/tdg-github-action@7cc4b6643e790dde39ac8bf2cfc8c08c660afbb2 # v0.4.17-beta

Mutable tags like v0.4.17-beta can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: ribtoks/tdg-github-action@7cc4b6643e790dde39ac8bf2cfc8c08c660afbb2 # v0.4.17-beta

Score breakdown

Security (35%)39

Popularity (20%)34

Maintenance (30%)58

Reliability (15%)70