ActionRank
Check your actions

Setup Biome

Actively maintained

biomejs/setup-biome · MIT

Setup the Biome CLI in GitHub Actions

★ 132 starsLast commit 5 days agoLatest v2.7.1
C
68
/ 100
Security 50Maintenance 90Popularity 43Reliability 96

Security signals

OpenSSF Scorecard5.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: biomejs/setup-biome@4c91541eaada48f67d7dbd7833600ce162b68f51 # v2.7.1

Mutable tags like v2.7.1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: biomejs/setup-biome@4c91541eaada48f67d7dbd7833600ce162b68f51 # v2.7.1

Score breakdown

Security (35%)50
Popularity (20%)43
Maintenance (30%)90
Reliability (15%)96