Skip to content

Overview

better-semantic-release (bsr) is a drop-in fork of python-semantic-release with built-in release-safety guards. It keeps the same [tool.semantic_release] configuration schema, the same semantic-release CLI and the same GitHub Action interface — switching over means pointing the uses: line at the fork.

  • Release-safety guards that run before any commit, tag or push (orphan-tag guard, registry-collision guard, and more); opt out per-repository under [tool.semantic_release.bsr].
  • A hardened publish path: the OCI-based publish-action that creates releases and uploads assets from a digest-pinned container image.
  • A signed action-pin registry so consumer repos can verify that the pin they use is the genuine, fresh publisher — see Action-pin registry.
- uses: n24q02m/better-semantic-release@<40-char-sha> # v1.5.0

Pin the full commit SHA and keep the version in the trailing comment — that comment is what Renovate/Dependabot read. See Action pinning.