Merge Gatekeeper

Actively maintained

upsidr/merge-gatekeeper · MIT

Get better merge control

★ 137 starsLast commit 1 months agoLatest v1.2.1

/ 100

Security signals

OpenSSF Scorecard4.8 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: upsidr/merge-gatekeeper@09af7a82c1666d0e64d2bd8c01797a0bcfd3bb5d # v1.2.1

Mutable tags like v1.2.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: upsidr/merge-gatekeeper@09af7a82c1666d0e64d2bd8c01797a0bcfd3bb5d # v1.2.1

Score breakdown

Security (35%)49

Popularity (20%)41

Maintenance (30%)53

Reliability (15%)70