Transmute

Abandoned

transmute-industries/transmute · Apache-2.0

Transmute

★ 58 starsLast commit 1 year agoLatest v0.9.3

/ 100

Security signals

OpenSSF Scorecard2.8 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: transmute-industries/transmute@c5cf0ce182a180f3f11436835bb5906a40e6f49e # v0.9.3

Mutable tags like v0.9.3 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: transmute-industries/transmute@c5cf0ce182a180f3f11436835bb5906a40e6f49e # v0.9.3

Score breakdown

Security (35%)37

Popularity (20%)36

Maintenance (30%)5

Reliability (15%)47