step-security/assign-author

step-security/assign-author

GitHub Actions to assign author to issue or PR.

GitHubGitHub Repository

0 star

Node.js

Node Action

Maintained by StepSecurity

Score updated 2 days ago

GitHub Actions security score comparison

step-security/assign-authortechnote-space/assign-author

Score

10/10

0/10

License

MIT License

Maintained

Maintained by StepSecurity

Vulnerabilities

2 existing vulnerabilities detected

Branch protection

Branch protection is maximal on development and all release branches

Manual code review

Upstream changes are reviewed before merging-

Secure publishing

Reproducible builds with SBOM and provenance-

Signed commits

All commits are signed-

Automated security tools

Findings from tools are triaged and fixed before each change-

Popular

Used by StepSecurity enterprise customersUsed by 227 open-source projects

Security Policy

security policy file detectedsecurity policy file not detected

Networking Behavior of step-security/assign-author

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
api.github.comGitHubGitHub