Autosquash
Abandonedtibdex/autosquash · MIT · archived
GitHub Action to update PRs with outdated checks and squash and merge the ones matching all branch protections
★ 142 starsLast commit 5 years agoLatest v2.2.2
F
25
/ 100
Security signals
OpenSSF ScorecardNo data
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: tibdex/autosquash@069b2340d3c7a90c5d310f198b14f64dc549b2f0 # v2.2.2Mutable tags like v2.2.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: tibdex/autosquash@069b2340d3c7a90c5d310f198b14f64dc549b2f0 # v2.2.2
Score breakdown
Security (35%)50
Popularity (20%)37
Maintenance (30%)0
Reliability (15%)0