Install Clang

Actively maintained

egor-tensin/setup-clang · MIT

GitHub action to set up Clang & LLVM

★ 70 starsLast commit 1 months agoLatest v2.3

/ 100

Security signals

OpenSSF Scorecard3.6 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: egor-tensin/setup-clang@23bc15cd4207e45f1566447deb48f4ff3ef932cb # v2.3

Mutable tags like v2.3 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: egor-tensin/setup-clang@23bc15cd4207e45f1566447deb48f4ff3ef932cb # v2.3

Score breakdown

Security (35%)42

Popularity (20%)29

Maintenance (30%)90

Reliability (15%)60