ActionRank

checkout-action

Actively maintained

taiki-e/checkout-action · Apache-2.0

GitHub Action for checking out a repository. (Simplified actions/checkout alternative that does not depend on Node.js.)

56 starsLast commit 6 days agoLatest v1.4.2
C
69
/ 100
Security 75Maintenance 89Popularity 28Reliability 70

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesEnabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2

Mutable tags like v1.4.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2

Score breakdown

Security (35%)75
Popularity (20%)28
Maintenance (30%)89
Reliability (15%)70

Add this badge to your README

ActionRank grade badge for checkout-action
Markdown
[![ActionRank](https://actionrank.dev/api/badge/taiki-e-checkout-action)](https://actionrank.dev/actions/taiki-e-checkout-action)
HTML version
HTML
<a href="https://actionrank.dev/actions/taiki-e-checkout-action"><img src="https://actionrank.dev/api/badge/taiki-e-checkout-action" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

Get alerts for checkout-action

We'll email you only if checkout-action becomes abandoned or a new advisory is published. Unsubscribe any time. How we handle your address