ActionRank
Check your actions

checkout-action

Actively maintained

taiki-e/checkout-action · Apache-2.0

GitHub Action for checking out a repository. (Simplified actions/checkout alternative that does not depend on Node.js.)

★ 56 starsLast commit 29 days agoLatest v1.4.2
B
72
/ 100
Security 75Maintenance 99Popularity 28Reliability 70

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesEnabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2

Mutable tags like v1.4.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2

Score breakdown

Security (35%)75
Popularity (20%)28
Maintenance (30%)99
Reliability (15%)70