step-security/repo-file-sync-action

step-security/repo-file-sync-action

Secure drop-in replacement for BetaHuhn/repo-file-sync-action

🔄 GitHub Action to keep files like Action workflows or entire directories in sync between multiple repositories.

GitHubGitHub Repository

0 star

Node.js

Node Action

Maintained by StepSecurity

Score updated 1 day ago

GitHub Actions security score comparison

step-security/repo-file-sync-actionBetaHuhn/repo-file-sync-action

Score

10/10

2/10

License

MIT LicenseMIT License

Maintained

Maintained by StepSecurity0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0

Vulnerabilities

0 existing vulnerabilities detected

39 existing vulnerabilities detected

Branch protection

Branch protection is maximal on development and all release branches

branch protection not enabled on development/release branches

Manual code review

Upstream changes are reviewed before merging-

Secure publishing

Reproducible builds with SBOM and provenance-

Signed commits

All commits are signed-

Automated security tools

Findings from tools are triaged and fixed before each change-

Popular

Used by StepSecurity enterprise customersUsed by 165 open-source projects

Security Policy

security policy file detectedsecurity policy file not detected