PSScriptAnalyzer checks

Abandoned

devblackops/github-action-psscriptanalyzer · MIT

GitHub Action to run PSScriptAnalyzer static code analysis

★ 76 starsLast commit 4 years agoLatest v2.4.0

/ 100

Security signals

OpenSSF Scorecard3.2 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: devblackops/github-action-psscriptanalyzer@854038567344559afaaa8ccb7a014452b99d86ee # v2.4.0

Mutable tags like v2.4.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: devblackops/github-action-psscriptanalyzer@854038567344559afaaa8ccb7a014452b99d86ee # v2.4.0

Score breakdown

Security (35%)39

Popularity (20%)34

Maintenance (30%)4

Reliability (15%)70