Automate pull request generation and tagging for releases using tagpr

Actively maintained

automatically creates and updates a pull request for unreleased items, tag them when they are merged, and create releases.

★ 329 starsLast commit 12 days agoLatest v1.20.3

/ 100

Security signals

OpenSSF Scorecard5.2 / 10

SECURITY.md presentNo

Immutable releasesEnabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: Songmu/tagpr@7ebae2dcc300132baa7cc9dd108c8923b07fc366 # v1.20.3

Mutable tags like v1.20.3 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: Songmu/tagpr@7ebae2dcc300132baa7cc9dd108c8923b07fc366 # v1.20.3

Score breakdown

Security (35%)61

Popularity (20%)54

Maintenance (30%)100

Reliability (15%)70

Add this badge to your README

ActionRank grade badge for Automate pull request generation and tagging for releases using tagpr

Markdown

[![ActionRank](https://actionrank.dev/api/badge/songmu-tagpr)](https://actionrank.dev/actions/songmu-tagpr)

HTML version

HTML

<a href="https://actionrank.dev/actions/songmu-tagpr"><img src="https://actionrank.dev/api/badge/songmu-tagpr" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

Automate pull request generation and tagging for releases using tagpr

Security signals

How to use it safely

Score breakdown

Add this badge to your README

Get alerts for Automate pull request generation and tagging for releases using tagpr