PHPStan (php-actions)

Stale

php-actions/phpstan

PHP Static Analysis in Github Actions.

★ 71 starsLast commit 7 months agoLatest v3.0.3

/ 100

Security signals

OpenSSF Scorecard2.5 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: php-actions/phpstan@d8f8887acaac249b05ac11909c4cdbb018f52211 # v3.0.3

Mutable tags like v3.0.3 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: php-actions/phpstan@d8f8887acaac249b05ac11909c4cdbb018f52211 # v3.0.3

Score breakdown

Security (35%)35

Popularity (20%)36

Maintenance (30%)27

Reliability (15%)83

Add this badge to your README

ActionRank grade badge for PHPStan (php-actions)

Markdown

[![ActionRank](https://actionrank.dev/api/badge/php-actions-phpstan)](https://actionrank.dev/actions/php-actions-phpstan)

HTML version

HTML

<a href="https://actionrank.dev/actions/php-actions-phpstan"><img src="https://actionrank.dev/api/badge/php-actions-phpstan" alt="ActionRank score"></a>

Free to use, no attribution required — the badge updates itself as the score changes. How badges work

PHPStan (php-actions)

Security signals

How to use it safely

Score breakdown

Add this badge to your README

Get alerts for PHPStan (php-actions)