ActionRank
Check your actions

PHPStan (php-actions)

Stale

php-actions/phpstan

PHP Static Analysis in Github Actions.

★ 71 starsLast commit 5 months agoLatest v3.0.3
D
41
/ 100
Security 35Maintenance 30Popularity 36Reliability 83

Security signals

OpenSSF Scorecard2.5 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: php-actions/phpstan@d8f8887acaac249b05ac11909c4cdbb018f52211 # v3.0.3

Mutable tags like v3.0.3 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: php-actions/phpstan@d8f8887acaac249b05ac11909c4cdbb018f52211 # v3.0.3

Score breakdown

Security (35%)35
Popularity (20%)36
Maintenance (30%)30
Reliability (15%)83