step-security/cloudsmith-cli-action/__builder_checkout_dir__/.github/actions/privacy-check
This GitHub repository contains a GitHub Action for installing and pre-authenticating the Cloudsmith CLI using OpenID Connect (OIDC). It simplifies CI/CD workflows by automating the setup and authentication process, enhancing security, and ensuring seamless integration with Clou...
GitHub Actions security score
| step-security/cloudsmith-cli-action/__builder_checkout_dir__/.github/actions/privacy-check | |
|---|---|
Score | 8/10 |
License | MIT License |
Maintained | Maintained by StepSecurity |
Vulnerabilities | 12 existing vulnerabilities detected |
Branch protection | Branch protection is maximal on development and all release branches |
Manual code review | Upstream changes are reviewed before merging |
Secure publishing | Reproducible builds with SBOM and provenance |
Signed commits | All commits are signed |
Automated security tools | Findings from tools are triaged and fixed before each change |
Popular | Used by StepSecurity enterprise customers |
Security Policy | security policy file detected |