PHPCS Code Review

Stale

rtCamp/action-phpcs-code-review · MIT

Github Action to perform automated code review on pull requests

★ 117 starsLast commit 6 months agoLatest v3.1.1

/ 100

Security signals

OpenSSF Scorecard3.2 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: rtCamp/action-phpcs-code-review@fa47f3f2edd41a479d7f02688caf6fbdaba29175 # v3.1.1

Mutable tags like v3.1.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: rtCamp/action-phpcs-code-review@fa47f3f2edd41a479d7f02688caf6fbdaba29175 # v3.1.1

Score breakdown

Security (35%)39

Popularity (20%)42

Maintenance (30%)34

Reliability (15%)70