ActionRank
Check your actions

rust-toolchain

Abandoned

actions-rs/toolchain · MIT · archived

🛠️ GitHub Action for `rustup` commands

★ 609 starsLast commit 5 years agoLatest v1.0.7
F
23
/ 100
Security 39Maintenance 0Popularity 49Reliability 0

Security signals

OpenSSF Scorecard3.1 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1.0.7

Mutable tags like v1.0.7 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1.0.7

Score breakdown

Security (35%)39
Popularity (20%)49
Maintenance (30%)0
Reliability (15%)0