ActionRank
Check your actions

Setup Poetry

Abandoned

Gr1N/setup-poetry · MIT

Set up your GitHub Actions workflow with a specific version of Poetry

★ 91 starsLast commit 2 years agoLatest v9
F
31
/ 100
Security 39Maintenance 4Popularity 37Reliability 60

Security signals

OpenSSF Scorecard3.2 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: Gr1N/setup-poetry@48b0f77c8c1b1b19cb962f0f00dff7b4be8f81ec # v9

Mutable tags like v9 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: Gr1N/setup-poetry@48b0f77c8c1b1b19cb962f0f00dff7b4be8f81ec # v9

Score breakdown

Security (35%)39
Popularity (20%)37
Maintenance (30%)4
Reliability (15%)60