ActionRank
Check your actions

Create .env file

Abandoned

SpicyPizza/create-envfile · MIT

Github Action to create a .env file with Github Secrets

★ 476 starsLast commit 2 years agoLatest v2.0.3
F
35
/ 100
Security 44Maintenance 4Popularity 49Reliability 57

Security signals

OpenSSF Scorecard4.0 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: SpicyPizza/create-envfile@ace6d4f5d7802b600276c23ca417e669f1a06f6f # v2.0.3

Mutable tags like v2.0.3 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: SpicyPizza/create-envfile@ace6d4f5d7802b600276c23ca417e669f1a06f6f # v2.0.3

Score breakdown

Security (35%)44
Popularity (20%)49
Maintenance (30%)4
Reliability (15%)57