ActionRank

Branch Protection Bot

Abandoned

benjefferies/branch-protection-bot · MIT

A bot tool to disable and re-enable "Include administrators" option in branch protection

73 starsLast commit 2 years agoLatest v1.1.2
F
32
/ 100
Security 39Maintenance 4Popularity 33Reliability 70

Security signals

OpenSSF Scorecard3.1 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: benjefferies/branch-protection-bot@af281f37de86139d1c7a27b91176b5dc1c2c827c # v1.1.2

Mutable tags like v1.1.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: benjefferies/branch-protection-bot@af281f37de86139d1c7a27b91176b5dc1c2c827c # v1.1.2

Score breakdown

Security (35%)39
Popularity (20%)33
Maintenance (30%)4
Reliability (15%)70