SCP Command to Transfer Files

Name: SCP Command to Transfer Files
Rating: 53 (1 reviews)

Actively maintained

appleboy/scp-action · MIT

GitHub Action that copy files and artifacts via SSH.

★ 1.6k starsLast commit 15 days agoLatest v1.0.0

/ 100

Security signals

OpenSSF Scorecard2.9 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: appleboy/scp-action@ff85246acaad7bdce478db94a363cd2bf7c90345 # v1.0.0

Mutable tags like v1.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: appleboy/scp-action@ff85246acaad7bdce478db94a363cd2bf7c90345 # v1.0.0

Score breakdown

Security (35%)37

Popularity (20%)52

Maintenance (30%)63

Reliability (15%)70