maven-settings-action
Actively maintaineds4u/maven-settings-action · MIT
This action setup maven settings.xml
★ 125 starsLast commit 2 months agoLatest v4.0.0
C
56
/ 100
Security signals
OpenSSF Scorecard4.9 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record
How to use it safely
Recommended: pin to commit SHA
uses: s4u/maven-settings-action@894661b3ddae382f1ae8edbeab60987e08cf0788 # v4.0.0Mutable tags like v4.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.
Full workflow example
steps: - uses: s4u/maven-settings-action@894661b3ddae382f1ae8edbeab60987e08cf0788 # v4.0.0
Score breakdown
Security (35%)49
Popularity (20%)44
Maintenance (30%)65
Reliability (15%)70