Setup GraalVM environment

Abandoned

DeLaGuardo/setup-graalvm · MIT · archived

★ 63 starsLast commit 3 years agoLatest 5.0

/ 100

Security signals

OpenSSF Scorecard2.8 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: DeLaGuardo/setup-graalvm@48f2bf339ab7d35e31029b1822a213681fdfc42e # 5.0

Mutable tags like 5.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: DeLaGuardo/setup-graalvm@48f2bf339ab7d35e31029b1822a213681fdfc42e # 5.0

Score breakdown

Security (35%)37

Popularity (20%)29

Maintenance (30%)0

Reliability (15%)0