Setup just

Actively maintained

extractions/setup-just · Apache-2.0

🤖 GitHub Action to install the just command runner

★ 155 starsLast commit 1 months agoLatest v4.0.0

/ 100

Security signals

OpenSSF Scorecard3.0 / 10

SECURITY.md presentNo

Immutable releasesNot enabled

Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA

uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 # v4.0.0

Mutable tags like v4.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example

steps:
  - uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 # v4.0.0

Score breakdown

Security (35%)38

Popularity (20%)40

Maintenance (30%)81

Reliability (15%)60