ActionRank
Check your actions

Repo File Sync Action

Abandoned

BetaHuhn/repo-file-sync-action · MIT

🔄 GitHub Action to keep files like Action workflows or entire directories in sync between multiple repositories.

★ 365 starsLast commit 2 years agoLatest v1.21.1
F
36
/ 100
Security 41Maintenance 4Popularity 52Reliability 70

Security signals

OpenSSF Scorecard3.5 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: BetaHuhn/repo-file-sync-action@8b92be3375cf1d1b0cd579af488a9255572e4619 # v1.21.1

Mutable tags like v1.21.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: BetaHuhn/repo-file-sync-action@8b92be3375cf1d1b0cd579af488a9255572e4619 # v1.21.1

Score breakdown

Security (35%)41
Popularity (20%)52
Maintenance (30%)4
Reliability (15%)70