Generate settings.xml for Maven Builds

Abandoned

whelk-io/maven-settings-xml-action · Apache-2.0 · archived

Github Action to create maven settings (~/.m2/settings.xml)

★ 74 starsLast commit 2 years agoLatest v22

/ 100

Security signals

OpenSSF Scorecard3.4 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: whelk-io/maven-settings-xml-action@9dc09b23833fa9aa7f27b63db287951856f3433d # v22

Mutable tags like v22 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: whelk-io/maven-settings-xml-action@9dc09b23833fa9aa7f27b63db287951856f3433d # v22

Score breakdown

Security (35%)40

Popularity (20%)36

Maintenance (30%)0

Reliability (15%)0