ActionRank

Scala Steward GitHub Action

Actively maintained

scala-steward-org/scala-steward-action · Apache-2.0

A Github Action to launch Scala Steward in your repository

147 starsLast commit todayLatest v2.93.0
B
70
/ 100
Security 55Maintenance 100Popularity 49Reliability 70

Security signals

OpenSSF Scorecard5.8 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: scala-steward-org/scala-steward-action@41bd88543dcf5e5455689f04d041b095eb901660 # v2.93.0

Mutable tags like v2.93.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: scala-steward-org/scala-steward-action@41bd88543dcf5e5455689f04d041b095eb901660 # v2.93.0

Score breakdown

Security (35%)55
Popularity (20%)49
Maintenance (30%)100
Reliability (15%)70