Skip to content

Security: shivammathur/setup-php


Security Policy

Supported Versions

The latest patch versions of v1 and v2 releases of this project are supported for security updates.

Supported PHP Versions

This security policy only applies to the latest patches of the following PHP versions.

Version Supported

Reporting a Vulnerability

If you have found any issues that might have security implications in the versions supported, please send a report privately to Do not report security reports publicly.


If you use this GitHub Action through a Tidelift subscription, please refer to

There aren’t any published security advisories