firehose
Warn
Audited by Socket on Oct 29, 2026
1 alert found:
SecuritySecurityscripts/fast-merger.sh
MEDIUMSecurityMEDIUM
scripts/fast-merger.sh
This readable Bash/Python script automates PR selection and squash-merges qualifying pull requests through GitHub. Its `--admin` option can bypass branch protections, and pending long-running checks do not prevent a merge, so incorrect configuration or selection can merge code without all normal safeguards; this is a high operational security risk, not evidence of malware. No suspicious domains, URLs, IP addresses, or credential theft are present.
Confidence: 98%Severity: 79%
Audit Metadata