ibexa/ci-scripts
The repository remains active, with six recent commits from four contributors, organization backing, tests, security scanning, and a security policy. The release is old and all five workflow actions are unpinned; a high-confidence secrets-inherit finding adds workflow risk.
72%
Total Score
100
92
100
Health Score Breakdown
The latest registry release was published over two years ago, with no releases in the last 12 months, which lowers confidence in this specific version despite recent repository activity.
The audit covered both workflows, but all five action references are unpinned and a high-confidence medium-severity secrets-inherit finding exposes credentials more broadly than necessary. No untrusted checkout or script-injection paths were found, limiting the severity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/console Version ^5.2 | — | — |
czproject/git-php Version ^4.0.3 | — | — |
guzzlehttp/guzzle Version ^6.5 | — | — |
knplabs/github-api Version ^3.0 | — | — |
symfony/filesystem Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.