billythekid/Clanker Blocker
Auto-block identified bot accounts from the UnsafeLabs/Bounty-Hunters clankers list
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit May 18, 2026
- License
- None
Pinned Snippet
uses: billythekid/clanker-blocker@e7471d6ad85c32963e76d6f69883115baeb0d4af # v1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| token | GitHub token with user:block or admin:org scope | yes | — |
| org | Organization to block users from (omit for personal account). Accepts a single org or comma-separated list. | no | — |
| orgs | Alias for org. Comma-separated list of organizations to block users from. | no | — |
| min-prs | Minimum PR count to qualify for blocking | no | 3 |
| dry-run | If true, only report what would be blocked | no | false |
| active-since | Only block accounts active after this ISO date | no | — |
| source-url | Override the clankers.json source URL (e.g., point to your own fork) | no | — |
| extra-usernames | Comma-separated list of additional usernames to block (beyond the clankers list) | no | — |
| exclude-usernames | Comma-separated list of usernames to never block, even if they appear on the list | no | — |
Outputs
| name | description |
|---|---|
| blocked-count | Number of newly blocked accounts |
| already-blocked-count | Number of accounts already blocked |
| error-count | Number of accounts that failed to block |
| blocked-users | JSON array of newly blocked usernames |