ActionRank
Check your actions

Setup Bun Runtime

Actively maintained

antongolub/action-setup-bun · MIT

Setup GitHub Actions workflow with a specific version of Bun

★ 50 starsLast commit 2 months agoLatest v1.13.2
D
47
/ 100
Security 39Maintenance 44Popularity 28Reliability 96

Security signals

OpenSSF Scorecard3.2 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: antongolub/action-setup-bun@f0b9f339a7ce9ba1174a58484e4dc9bbd6f7b133 # v1.13.2

Mutable tags like v1.13.2 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: antongolub/action-setup-bun@f0b9f339a7ce9ba1174a58484e4dc9bbd6f7b133 # v1.13.2

Score breakdown

Security (35%)39
Popularity (20%)28
Maintenance (30%)44
Reliability (15%)96