ActionRank
Check your actions

Auto-update

Abandoned

tibdex/auto-update · MIT

🔄 Automatically keep pull requests with auto-merge enabled up to date with their base branch

★ 65 starsLast commit 3 years agoLatest v2.2.1
F
34
/ 100
Security 50Maintenance 4Popularity 26Reliability 70

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: tibdex/auto-update@4081c5bdc34560b58288a010318054e63e6f4a51 # v2.2.1

Mutable tags like v2.2.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: tibdex/auto-update@4081c5bdc34560b58288a010318054e63e6f4a51 # v2.2.1

Score breakdown

Security (35%)50
Popularity (20%)26
Maintenance (30%)4
Reliability (15%)70