ActionRank
Check your actions

setup-git-credentials

Actively maintained

de-vri-es/setup-git-credentials · BSD-2-Clause

GitHub action to enable cloning private respositories.

★ 100 starsLast commit 1 months agoLatest v2.2.0
C
56
/ 100
Security 38Maintenance 82Popularity 37Reliability 70

Security signals

OpenSSF Scorecard3.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: de-vri-es/setup-git-credentials@5dd446b3857806f44ea73acf83c193190a385d63 # v2.2.0

Mutable tags like v2.2.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: de-vri-es/setup-git-credentials@5dd446b3857806f44ea73acf83c193190a385d63 # v2.2.0

Score breakdown

Security (35%)38
Popularity (20%)37
Maintenance (30%)82
Reliability (15%)70