RSyncer Action
AbandonedPendect/action-rsyncer · MIT
Rsync GitHub Action
★ 51 starsLast commit 3 years agoLatest v2.0.0
F
31
/ 100
Security signals
OpenSSF Scorecard3.7 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: Pendect/action-rsyncer@8e05ffa5c93e5d9c9b167796b26044d2c616b2b9 # v2.0.0Mutable tags like v2.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: Pendect/action-rsyncer@8e05ffa5c93e5d9c9b167796b26044d2c616b2b9 # v2.0.0
Score breakdown
Security (35%)42
Popularity (20%)31
Maintenance (30%)4
Reliability (15%)57