peter-evans/create-pull-request

A GitHub action to create a pull request for changes to your repository in the actions workspace

GitHub Repository

2723 stars

Node Action

Maintained action available

Score updated 7 days ago

GitHub Actions security score

	peter-evans/create-pull-request
Score	6/10
License	MIT License
Maintained	14 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Vulnerabilities	7 existing vulnerabilities detected
Branch protection	branch protection is not maximal on development and all release branches
Manual code review	-
Secure publishing	-
Signed commits	-
Automated security tools	-
Popular	Used by 3664 open-source projects
Security Policy	security policy file not detected

Networking Behavior of peter-evans/create-pull-request

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination

Network Destination	Owner
github.com	GitHub
api.github.com	GitHub
fulcio.sigstore.dev	Sigstore
tuf-repo-cdn.sigstore.dev	Sigstore
rekor.sigstore.dev	Sigstore
repo.maven.apache.org	Unknown
plugins-artifacts.gradle.org	Gradle
jcenter.bintray.com	Unknown
plugins.gradle.org	Gradle
d-gj2h7tnxlh.execute-api.us-west-2.amazonaws.com	Unknown
crl.iavtech.net	Unknown
login.live.com	Unknown
settings-win.data.microsoft.com	Microsoft
incoming.telemetry.mozilla.org	Unknown
telemetry-incoming.r53-2.services.mozilla.com	Unknown
ocsp.digicert.com	Unknown
fs.microsoft.com	Microsoft
download.windowsupdate.com	Unknown
geo.prod.do.dsp.mp.microsoft.com	Microsoft
kv601.prod.do.dsp.mp.microsoft.com	Microsoft
cp601.prod.do.dsp.mp.microsoft.com	Microsoft
au.download.windowsupdate.com	Unknown
ocsp.sectigo.com	Unknown
packages.microsoft.com	Microsoft
fe2cr.update.microsoft.com	Microsoft
dns.msftncsi.com	Unknown
prod.app-api.stepsecurity.io	Unknown