GitHub Repo Sync

Abandoned

repo-sync/github-sync · MIT · archived

⤵️ A GitHub Action for syncing current repository with remote

★ 446 starsLast commit 2 months agoLatest v2.3.0

/ 100

Security signals

OpenSSF Scorecard3.5 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: repo-sync/github-sync@3832fe8e2be32372e1b3970bbae8e7079edeec88 # v2.3.0

Mutable tags like v2.3.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: repo-sync/github-sync@3832fe8e2be32372e1b3970bbae8e7079edeec88 # v2.3.0

Score breakdown

Security (35%)41

Popularity (20%)47

Maintenance (30%)0

Reliability (15%)0