git-ship
Warn
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Disables GitHub Actions workflows via the GitHub API (
gh api repos/{OWNER}/{REPO}/actions/workflows/{ID}/disable -X PUT). This action intentionally bypasses mandatory CI checks designed to verify code safety and quality. - [COMMAND_EXECUTION]: Deletes branch protection rules requiring pull request reviews (
gh api repos/{OWNER}/{REPO}/branches/main/protection/required_pull_request_reviews -X DELETE). This allows for merging code into protected branches without the required human approvals or security oversight. - [COMMAND_EXECUTION]: Utilizes the
--adminflag during pull request merging (gh pr merge {PR_NUMBER} --squash --admin), which overrides existing repository restrictions and protected branch settings.
Audit Metadata