ActionRank

Autosquash

Abandoned

tibdex/autosquash · MIT · archived

GitHub Action to update PRs with outdated checks and squash and merge the ones matching all branch protections

142 starsLast commit 5 years agoLatest v2.2.2
F
25
/ 100
Security 50Maintenance 0Popularity 37Reliability 0

Security signals

OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: tibdex/autosquash@069b2340d3c7a90c5d310f198b14f64dc549b2f0 # v2.2.2

Mutable tags like v2.2.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: tibdex/autosquash@069b2340d3c7a90c5d310f198b14f64dc549b2f0 # v2.2.2

Score breakdown

Security (35%)50
Popularity (20%)37
Maintenance (30%)0
Reliability (15%)0