ActionRank

Push directory to another repository

Stale

cpina/github-action-push-to-another-repository · MIT

github Action to push files into another Github repository

490 starsLast commit 10 months agoLatest v1.7.3
D
41
/ 100
Security 33Maintenance 39Popularity 49Reliability 54

Security signals

OpenSSF Scorecard2.1 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: cpina/github-action-push-to-another-repository@55306faa4ed53b815ae49e564af8cfb359d32ae2 # v1.7.3

Mutable tags like v1.7.3 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: cpina/github-action-push-to-another-repository@55306faa4ed53b815ae49e564af8cfb359d32ae2 # v1.7.3

Score breakdown

Security (35%)33
Popularity (20%)49
Maintenance (30%)39
Reliability (15%)54