Back to plugin

Security audit

Airflow DAG Git Plugin

Security checks for vulnerabilities and agentic risk

Overview

The plugin has a coherent GitHub PR purpose, but its safety documentation and code conflict in ways that could cause unintended persistent GitHub changes.

Review before installing. If testing, use a sandbox repository, a least-privilege GitHub token, narrow allowlists, and readOnly mode where possible; do not rely on previewOnly or reuse existing branch names until the branch-conflict and preview-mode issues are fixed.

Static analysis

No suspicious patterns detected.