ActionRank

Mirror a repository using SSH

Actively maintained

wearerequired/git-mirror-action · MIT

⏭ A GitHub Action for mirroring a git repository to another location via SSH.

156 starsLast commit 12 days agoLatest v1.3.1
C
62
/ 100
Security 53Maintenance 84Popularity 39Reliability 70

Security signals

OpenSSF Scorecard3.9 / 10
SECURITY.md presentNo
Immutable releasesEnabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: wearerequired/git-mirror-action@6bbc55f2f0082bca533b72dc711f7d37154d40cc # v1.3.1

Mutable tags like v1.3.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: wearerequired/git-mirror-action@6bbc55f2f0082bca533b72dc711f7d37154d40cc # v1.3.1

Score breakdown

Security (35%)53
Popularity (20%)39
Maintenance (30%)84
Reliability (15%)70