ActionRank

Git Commit Data

Actively maintained

rlespinasse/git-commit-data-action · MIT

Action to expose git commit info

42 starsLast commit 6 days agoLatest v1.5.0
C
56
/ 100
Security 64Maintenance 56Popularity 30Reliability 70

Security signals

OpenSSF Scorecard5.7 / 10
SECURITY.md presentYes
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: rlespinasse/git-commit-data-action@2b76766acf9574c24b5cec7608be8db5dc17968e # v1.5.0

Mutable tags like v1.5.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: rlespinasse/git-commit-data-action@2b76766acf9574c24b5cec7608be8db5dc17968e # v1.5.0

Score breakdown

Security (35%)64
Popularity (20%)30
Maintenance (30%)56
Reliability (15%)70