ActionRank
Check your actions

rustup toolchain install

Actively maintained

dtolnay/rust-toolchain · MIT

Concise GitHub Action for installing a Rust toolchain

★ 1.6k starsLast commit 16 days agoLatest v1
D
53
/ 100
Security 48Maintenance 56Popularity 54Reliability 60

Security signals

OpenSSF Scorecard4.7 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1

Mutable tags like v1 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1

Score breakdown

Security (35%)48
Popularity (20%)54
Maintenance (30%)56
Reliability (15%)60