bazel-contrib/publish-to-bcr

GitHub release automation for publishing modules to the Bazel Central Registry

GitHub Repository

37 stars

Node Action

Maintained action available

Score updated 5 days ago

GitHub Actions security score

	bazel-contrib/publish-to-bcr
Score	6/10
Pinnable	Yes
License	Apache License 2.0
Maintained	Action runtime is node20, which is deprecated on GitHub-hosted runners
Vulnerabilities	81 existing vulnerabilities detected
Branch protection	Branch protection is maximal on development and all release branches
AI analysis	3 Security findings
Manual code review	-
Secure publishing	-
Signed commits	-
Automated security tools	-
Popular	Used by 280 open-source projects
Security Policy	security policy file not detected

Networking Behavior of bazel-contrib/publish-to-bcr

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination

Network Destination	Owner
github.com	GitHub
release-assets.githubusercontent.com	GitHub