ActionRank
Check your actions

GitHub Push

Actively maintained

ad-m/github-push-action · MIT

GitHub actions to push back to repository eg. updated code

★ 1.3k starsLast commit 2 months agoLatest v1.3.0
C
63
/ 100
Security 47Maintenance 84Popularity 58Reliability 62

Security signals

OpenSSF Scorecard4.5 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: ad-m/github-push-action@881a6320fdb16eb5318c5054f31c218aec2b324c # v1.3.0

Mutable tags like v1.3.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: ad-m/github-push-action@881a6320fdb16eb5318c5054f31c218aec2b324c # v1.3.0

Score breakdown

Security (35%)47
Popularity (20%)58
Maintenance (30%)84
Reliability (15%)62