ActionRank
Check your actions

Set up OCaml

Actively maintained

ocaml/setup-ocaml · MIT

GitHub Action for the OCaml programming language

★ 227 starsLast commit 5 days agoLatest v3.7.0
B
79
/ 100
Security 86Maintenance 96Popularity 49Reliability 70

Security signals

OpenSSF Scorecard7.6 / 10
SECURITY.md presentYes
Immutable releasesEnabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: ocaml/setup-ocaml@15d660006c1d3110d77c34b7faa3bddefe8b82f0 # v3.7.0

Mutable tags like v3.7.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: ocaml/setup-ocaml@15d660006c1d3110d77c34b7faa3bddefe8b82f0 # v3.7.0

Score breakdown

Security (35%)86
Popularity (20%)49
Maintenance (30%)96
Reliability (15%)70