ActionRank

Sync GitHub Security Alerts with Jira

Actively maintained

reload/github-security-jira · MIT

Github Action for integrating Security Alerts with JIRA

52 starsLast commit 8 days agoLatest v1.5.0
C
57
/ 100
Security 58Maintenance 64Popularity 37Reliability 70

Security signals

OpenSSF Scorecard6.3 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: reload/github-security-jira@dc749962c49282170a2e5e041c5cb81430f8b5e6 # v1.5.0

Mutable tags like v1.5.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: reload/github-security-jira@dc749962c49282170a2e5e041c5cb81430f8b5e6 # v1.5.0

Score breakdown

Security (35%)58
Popularity (20%)37
Maintenance (30%)64
Reliability (15%)70

Add this badge to your README

ActionRank grade badge for Sync GitHub Security Alerts with Jira
Markdown
[![ActionRank](https://actionrank.dev/api/badge/reload-github-security-jira)](https://actionrank.dev/actions/reload-github-security-jira)
HTML version
HTML
<a href="https://actionrank.dev/actions/reload-github-security-jira"><img src="https://actionrank.dev/api/badge/reload-github-security-jira" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

Get alerts for Sync GitHub Security Alerts with Jira

We'll email you only if Sync GitHub Security Alerts with Jira becomes abandoned or a new advisory is published. Unsubscribe any time. How we handle your address