Deployment Automation
Warn
Audited by Socket on Feb 24, 2026
1 alert found:
SecuritySecurityscripts/rollback-procedures.sh
MEDIUMSecurityMEDIUM
scripts/rollback-procedures.sh
This script implements destructive emergency rollback procedures (delete GitHub releases and tags, reset branches with force pushes, create recovery release, and write backups). I find no indicators of malware (no exfiltration, no obfuscated or hidden code), but the script is high-risk operationally: it performs irreversible actions and lacks robust safeguards to prevent accidental or unauthorized damage. Treat this as an administrative tool that must only be run by authorized personnel in the correct repository context; consider adding pre-checks, dry-run, and explicit repo validation before use.
Confidence: 90%Severity: 70%
Audit Metadata