Automated research artifact — not the upstream project.

This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gitroomhq/postiz-app at commit e51cae16147be77712a62fbc6fb670ada8a9f385 (2026-04-22), redistributed under that project's own licence, whose file is included unchanged in this snapshot.

The upstream project is not involved, is never targeted, and the vulnerability studied here is already public. Every secret and variable in this repository is a randomly generated dummy value — no real credential is present. Action references and runner images are pinned to what they resolved to on 2026-04-22; see pinning.md in the harness output for every change made to the snapshot.

Questions or objections: [email protected]

NEW: check out Postiz agent CLI! perfect for OpenClaw and other agents

Explore the docs »

Watch the YouTube Tutorials»

Register · Join Our Discord (devs only) · Public API

NodeJS SDK · N8N custom node · Make.com integration

🔌 See the leading Postiz features

✨ Features

Our Sponsors

Sponsor	Logo	Description
Hostinger		Hostinger is on a mission to make online success possible for anyone – from developers to aspiring bloggers and business owners
Virlo		Virlo is the #1 social media trend spotting and all-in-one GTM tool for teams leveraging short-form video

Intro

• Schedule all your social media posts (many AI features)
• Measure your work with analytics.
• Collaborate with other team members to exchange or buy posts.
• Invite your team members to collaborate, comment, and schedule posts.
• At the moment there is no difference between the hosted version to the self-hosted version
• Perfect for automation (API) with platforms like N8N, Make.com, Zapier, etc.

Tech Stack

• Pnpm workspaces (Monorepo)
• NextJS (React)
• NestJS
• Prisma (Default to PostgreSQL)
• Temporal
• Resend (email notifications)

Quick Start

To have the project up and running, please follow the Quick Start Guide

Sponsor Postiz

We now give a few options to Sponsor Postiz:

• Just a donation: You like what we are building, and want to buy us some coffees so we can build faster.
• Main Repository: Get your logo with a backlink from the main Postiz repository. Postiz has almost 3m downloads and 20k views per month.
• Main Repository + Website: Get your logo on the central repository and the main website. Here are some metrics: - Website has 20k hits per month + 65 DR (strong backlink) - Repository has 20k hits per month + Almost 3m docker downloads.

Link: https://opencollective.com/postiz

Postiz Compliance