StepSecurity Logo
StepSecurity
LoginStart free
endbug/add-and-commit

endbug/add-and-commit

:octocat: Automatically commit changes made in your workflow run directly to your repo

GitHubGitHub Repository

1290 stars

Node.js

Node Action

Maintained action available

Score updated 11 hours ago

GitHub Actions security score

endbug/add-and-commit

Score

7/10

Pinnable

Yes

License

MIT License

Maintained

30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10

Vulnerabilities

2 existing vulnerabilities detected

Branch protection

branch protection is not maximal on development and all release branches

AI analysis

3 Security findings

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 14176 open-source projects

Security Policy

security policy file not detected

Networking Behavior of endbug/add-and-commit

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
github.comGitHubGitHub